Lucene search
+L

11 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-4963

Malicious code in bioql PyPI...

9.8CVSS9.5AI score0.03537EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/05/22 6:07 a.m.•14 views

CVE-2014-10075

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

9.8CVSS7.7AI score0.03537EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/14 1:49 a.m.•48 views

GHSA-QFWQ-CHF4-JVWG karo Metacharacter Handling Remote Command Execution

The karo gem through 2.5.2 for Ruby allows Remote command injection via the host field. A flaw in db.rb is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands. In particular lines 76 and 95 as of 2014-06-01 pass unsanitized user supplied input to...

9.8CVSS10AI score0.03537EPSS
SaveExploits1References7
Prion
Prion
•added 2018/10/05 6:29 a.m.•18 views

Command injection

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

7.5CVSS7.8AI score0.03537EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2018/10/05 6:29 a.m.•26 views

CVE-2014-10075

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

9.8CVSS9.9AI score0.03537EPSS
SaveExploits1References2
Mend
Mend
•added 2018/10/05 5:00 a.m.•1 views

CVE-2014-10075

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

9.8CVSS0.03537EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2018/10/05 5:00 a.m.•30 views

CVE-2014-10075

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

10AI score0.03537EPSS
SaveExploits1References2
CVE
CVE
•added 2018/10/05 5:00 a.m.•56 views

CVE-2014-10075

CVE-2014-10075 affects the Ruby karo gem (v2.3.8) and enables Remote command injection via the host field. The flaw resides in db.rb where metacharacters are mishandled, allowing an attacker to execute arbitrary commands (examples show building and executing a shell command with unsanitized input...

9.8CVSS9.8AI score0.03537EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/05 12:00 a.m.•5 views

CVE-2014-10075: Improper Neutralization of Special Elements used in a Command

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

9.8CVSS8.3AI score0.03537EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/10/05 12:00 a.m.•3 views

PT-2018-4164

Name of the Vulnerable Software and Affected Versions karo gem versions 2.3.8 through 2.5.2 Description The issue allows remote command injection via the host field. A flaw in the db.rb file is triggered when handling metacharacters, which may allow a remote attacker to execute arbitrary commands...

9.8CVSS0.03537EPSS
SaveExploits1References8
RubySec
RubySec
•added 2014/06/30 12:00 a.m.•26 views

karo Gem for Ruby db.rb Metacharacter Handling Remote Command Execution

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field. karo Gem for Ruby contains a flaw in db.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands. CWE-77 - Improper Neutralization of Special Elements used in a...

9.8CVSS7.6AI score0.03537EPSS
SaveExploits1References1
Rows per page
Query Builder