92 matches found
CVE-2015-0854
App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action...
CVE-2016-10081
/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action...
CVE-2015-0854
Summary (CVE-2015-0854): The Shutter screenshot tool is affected up to version 0.93.1. The vulnerability resides in App/HelperFunctions.pm where the image name is mishandled during the “Show in Folder” action, allowing a user-assisted remote attacker to execute arbitrary commands. This is trigger...
CVE-2015-0854
App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action...
Pidgin MXIT Protocol Directory Traversal Vulnerability
Pidgin is a cross-platform real-time communication client. A directory traversal vulnerability exists in the MXIT protocol handling of Pidgin version 2.10.11, which can be exploited by an attacker to overwrite a file by providing an invalid boot image name...
Design/Logic Flaw
kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name...
CVE-2011-4195
kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name...
Cross site scripting
Cross-site scripting XSS vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise SLE 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name...
CVE-2008-6295
Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...
CVE-2003-1464
Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service disconnect and unavailable inbox via a Short Message Service SMS message with a long image name...
CVE-2003-1464
Siemens 45 series mobile phones are affected by CVE-2003-1464 due to a buffer overflow triggered by an SMS containing a long image name, leading to a denial of service (disconnect and unavailable inbox). The connected documents corroborate the basic impact and entry, but do not provide concrete r...
