Lucene search
+L

482 matches found

Mageia
Mageia
•added 2023/12/12 9:19 p.m.•46 views

Updated fish packages fix a security vulnerability

Mageia 9 is updated to version 3.6.4 to fix CVE-2023-49284. Mageia 8 receives an upstream patch to fix CVE-2023-49284. CVE-2023-49284: fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command...

6.6CVSS7.2AI score0.00475EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2023/12/09 8:00 a.m.•17 views

Command substitution output can trigger shell expansion in fish shell

...

6.6CVSS7AI score0.00475EPSS
SaveExploits1
Openbugbounty
Openbugbounty
•added 2023/12/07 4:26 p.m.•9 views

mauritaniafish.com Improper Access Control vulnerability OBB-3805418

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/12/06 2:04 a.m.•10 views

SUSE CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

4.4CVSS6.7AI score0.00475EPSS
SaveExploits1References5
OSV
OSV
•added 2023/12/05 12:15 a.m.•14 views

AZL-32081 CVE-2023-49284 affecting package fish for versions less than 3.6.2-1

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS5.8AI score0.00475EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/05 12:15 a.m.•5 views

DEBIAN-CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS6.5AI score0.00475EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2023/12/05 12:15 a.m.•86 views

CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS7.3AI score0.00475EPSS
SaveExploits1
NVD
NVD
•added 2023/12/05 12:15 a.m.•32 views

CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS0.00475EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/05 12:15 a.m.•22 views

Information disclosure

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

3CVSS7.2AI score0.00475EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/12/05 12:15 a.m.•16 views

UBUNTU-CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS5.9AI score0.00475EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/12/05 12:00 a.m.•22 views

CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS6.8AI score0.00475EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2023/12/04 11:46 p.m.•99 views

CVE-2023-49284

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS6.8AI score0.00475EPSS
SaveExploits1
OSV
OSV
•added 2023/12/04 11:46 p.m.•28 views

CVE-2023-49284 Command substitution output can trigger shell expansion in fish shell

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

3.9CVSS6.4AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2023/12/04 11:46 p.m.•49 views

CVE-2023-49284 Command substitution output can trigger shell expansion in fish shell

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

3.9CVSS6.9AI score0.00475EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/04 11:46 p.m.•82 views

CVE-2023-49284

CVE-2023-49284 affects the fish shell (macOS, Linux, and related platforms). The vulnerability arises from Unicode non-characters used internally for marking wildcards and expansions, which can be read in command substitution output instead of being safely transformed. This can cause unexpected b...

6.6CVSS5.6AI score0.00475EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/12/04 12:00 a.m.•22 views

Github fish security breach

Github fish is a smart and user-friendly command line shell. A security vulnerability exists in Github fish versions prior to 3.6.2 that stems from allowing certain Unicode non-characters to be used internally to mark wildcards and extensions...

6.6CVSS6.8AI score0.00475EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•3 views

CVE-2023-49284: Interpretation Conflict

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally for marking wildcards and expansions. It will incorrectly allow these markers to be read on command substitution output, rather than...

6.6CVSS6.5AI score0.00475EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/10/20 12:00 a.m.•54 views

Ubuntu 20.04 ESM / 22.04 ESM : fish vulnerability (USN-5367-1)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5367-1 advisory. Justin Steven discovered that fish was not properly filtering local git configuration directives when running background git commands. A remote...

7.8CVSS7.7AI score0.01484EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/18 1:15 p.m.•38 views

CVE-2023-45065

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin = 1.42 versions...

7.1CVSS6.2AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/18 1:15 p.m.•17 views

CVE-2023-45065

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin = 1.42 versions...

6.1CVSS7.3AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder