CliInvoke: Argument Injection in Extensibility Runner Factory

Impact An argument-injection vulnerability exists in the CliInvoke package's runner factory: RunnerProcessFactory on the 2.x line and RunnerConfigurationFactory on the 3.x line. The factory joins the runner arguments, the caller's target, and the caller's arguments into a single...

CliInvoke: Argument Injection in Extensibility Runner Factory

An argument-injection vulnerability exists in the CliInvoke package's runner factory: RunnerProcessFactory on the 2.x line and RunnerConfigurationFactory on the 3.x line. The factory joins the runner arguments, the caller's target, and the caller's arguments into a single ProcessStartInfo.Argumen...

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the CliInvoke.Specializations package the PowershellProcessInvoker/CmdProcessInvoker invokers, and the UsePowerShell/UseCmd middleware in v3 pre-release versions. The wrappers re-run a caller-supplie...

CVE-2026-68325

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrsacpihid command-line parser appends entries to a fixed four-element earlyacpihidmap array. Unlike the sibling IOAPIC and HPET parsers, it does not reject a fifth entry before...

PT-2026-69725

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ivrs acpihid command-line parser fails to validate the number of entries added to the early acpihid map array. Because this array has a fixed size of four elements, the parser does n...

Linux Distros Unpatched Vulnerability : CVE-2018-16301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to...

Fedora: Security Advisory for golang-gopkg-alecthomas-kingpin-2 (FEDORA-2023-cf176d02d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: golang-gopkg-alecthomas-kingpin-2-2.3.2-1.fc37

Kingpin is a fluent-style, type-safe command-line parser. It supports flags, nested commands, and positional arguments...

[SECURITY] Fedora 39 Update: golang-gopkg-alecthomas-kingpin-2-2.3.2-1.fc39

Kingpin is a fluent-style, type-safe command-line parser. It supports flags, nested commands, and positional arguments...

SUSE CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

Cisco Adaptive Security Appliances Software 安全漏洞

Cisco Adaptive Security Appliances Software ASA Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides highly secure access to data and network resources and other features. A security vulnerability exists in the CLI parser of the...

USN-4992-1 grub2-signed, grub2-unsigned vulnerabilities

Máté Kukri discovered that the acpi command in GRUB 2 allowed privileged users to load crafted ACPI tables when secure boot is enabled. An attacker could use this to bypass UEFI Secure Boot restrictions. CVE-2020-14372 Chris Coulson discovered that the rmmod command in GRUB 2 contained a use-...

CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

ALPINE-CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

UBUNTU-CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

Cisco IOS XE Software CLI Parser Input Validation Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. An input validation vulnerability exists in the CLI parser in Cisco IOS XE Software. The vulnerability stems from the failure of the affected software to...

Cisco IOS XE Software CLI Parser Command Injection Vulnerability (CNVD-2018-20299)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. A command injection vulnerability exists in the CLI parser in Cisco IOS XE Software, which arises from an affected application failing to properly filter...

Multiple Cisco Products NX-OS Software CLI Parser Input Validation Vulnerability

Cisco MDS 9000 Series Multilayer Switches are products of Cisco Corporation.Cisco MDS 9000 Series Multilayer Switches is a 9000 series switch device.Nexus 2000 Series Fabric Extenders is a Nexus 2000 series switch array expander.NX-OS Software is a set of data center-class operating system softwa...

Cisco IOS XE Software CLI parser elevation of privilege vulnerability (CNVD-2018-08182)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.CLI parser is one of the command line command parsers. The CLI parser in Cisco IOS XE Software is vulnerable to a privilege extraction vulnerability that arises from the program's failure to properly filter...