Code injection

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...

CVE-2015-5186

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...

CVE-2015-5186

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...

UBUNTU-CVE-2015-5186

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...

DEBIAN-CVE-2015-5186

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...

Design/Logic Flaw

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

CVE-2017-0899

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences...

Cross-Site Scripting (XSS)

rack-tracker is vulnerable to cross-site scripting XSS attack. The library is vulnerable to cross-site scripting because the library does not santise escape characters...

Cross-Site Scripting (XSS)

caravel is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javscript via the models.py file due to a lack of escaping escape characters...

OracleVM 3.3 / 3.4 : foomatic (OVMSA-2016-0040)

The remote OracleVM system is missing necessary patches to address critical security updates : - Also consider back tick and semicolon as illegal shell escape characters. - CVE-2015-8327, CVE-2015-8560 - Prevent foomatic-rip overrun bug 1214534. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : cups-filters (openSUSE-2016-67)

This update fixes the following security issue : CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters bsc957531. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SUSE SLED11 / SLES11 Security Update : foomatic-filters (SUSE-SU-2016:0112-1)

This update fixes the following security issues : - CVE-2015-8327: adds backtick and semicolon to the list of illegal shell escape characters bsc957531. CVE-2015-8560: fixed code execution via improper escaping of ; bsc957531. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2016:0092-1 Security update for cups-filters

This update fixes the following security issue: CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters bsc957531...

Ubuntu: Security Advisory (USN-2838-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2831-1: cups-filters vulnerability

Michal Kowalczyk discovered that the cups-filters foomatic-rip filter incorrectly stripped shell escape characters. A remote attacker could possibly use this issue to execute arbitrary code as the lp user...

CVE-2015-5190

The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL...

PT-2015-6794 · Pcs +2 · Pcs +2

Name of the Vulnerable Software and Affected Versions: PCs versions 0.9.139 and earlier Description: The issue allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL. This is related to the pcsd web UI. Recommendations: For versions 0.9.139 and earlier,...