887 matches found
Command injection
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
CVE-2023-37275
CVE-2023-37275 affects Auto-GPT prior to v0.4.3, where a malicious external resource could cause the LLM to regurgitate JSON-encoded ANSI escape sequences, which are decoded and printed to the console as part of the model’s thinking process, spoofing system logs. The vulnerability is fixed in rel...
CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
Auto-GPT 安全漏洞
Auto-GPT is an artificial intelligence software agent program open-sourced by Significant Gravitas. A security vulnerability exists in versions prior to Auto-GPT 0.4.3, which stems from the possibility that a malicious external resource could cause a misleading message to be printed to the consol...
EulerOS 2.0 SP11 : less (EulerOS-SA-2023-2297)
According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Less before 609, crafted data can result in 'less -R' not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that...
EulerOS 2.0 SP11 : less (EulerOS-SA-2023-2273)
According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Less before 609, crafted data can result in 'less -R' not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that...
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2023-2297)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : kubernetes (2023-a1d7a29fe5)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a1d7a29fe5 advisory. Patch update to Kubernetes 1.25 for Fedora 37. Primarily a security fix for CVE-2023-2431: Bypass of seccomp profile enforcement. Tenable has...
RHEL 9 : less (RHSA-2023:3725)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3725 advisory. The less utility is a text file browser that resembles more, but allows users to move backwards in the file as well as forwards. Since less does not...
Moderate: Red Hat Security Advisory: less security update
An update for less is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal
A vulnerability was found in less. This flaw allows crafted data to result in "less -R" not filtering ANSI escape sequences sent to the terminal...
Moderate: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: crafted data can result i...
ALSA-2023:3725 Moderate: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: crafted data can result i...
Fedora 37 : less (2023-71442d7613)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-71442d7613 advisory. Security fix for CVE-2022-46663 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2023-2073)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.11.0 : less (EulerOS-SA-2023-2125)
According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In GNU Less before 609, crafted data can result in 'less -R' not filtering ANSI escape sequences sent to the terminal. CVE-2022-4666...
rubygem-rack: crafted requests can cause shell escape sequences
A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...
RHEL 7 : Red Hat Gluster Storage web-admin-build (RHSA-2023:1486)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1486 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Django is a high-level Python...
Denial Of Service (DoS)
less is vulnerable to Denial of Service DoS attacks. A malicious user is able to use crafted data, which results in less -R not filtering ANSI escape sequences sending to the terminal, causing the application to crash...