2062 matches found
EulerOS Virtualization 2.11.0 : less (EulerOS-SA-2024-1727)
According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE.CVE-2022-48624 Tenable has extracted the preceding...
EulerOS Virtualization 2.11.1 : less (EulerOS-SA-2024-1716)
According to the versions of the less package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE.CVE-2022-48624 Tenable has extracted the preceding...
Important: less
Issue Overview: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation als...
Important: less
Issue Overview: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation als...
Debian: Security Advisory (DLA-3823-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2023 : less (ALAS2023-2024-622)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-622 advisory. less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file...
[SECURITY] [DLA 3823-1] less security update
Debian LTS Advisory DLA-3823-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 27, 2024 https://wiki.debian.org/LTS Package : less Version : 487-0.1+deb10u1 CVE ID : CVE-2022-48624 CVE-2024-32487 Debian Bug : 1064293 1068938 Security vulnerabilities were found ...
Debian dla-3823 : less - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3823 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3823-1 [email protected]...
CVE-2024-32621 affecting package hdf5 for versions less than 1.14.4-1
CVE-2024-32621 affecting package hdf5 for versions less than 1.14.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-32620 affecting package hdf5 for versions less than 1.14.4-1
CVE-2024-32620 affecting package hdf5 for versions less than 1.14.4-1. An upgraded version of the package is available that resolves this issue...
USN-6756-1: less vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that less mishandled newline characters in file names. If a user or automated system were tricked into opening specially crafted files, an...
CVE-2022-21698 affecting package keda for versions less than 2.14.0-1
CVE-2022-21698 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-26909 affecting package kernel for versions less than 6.6.29.1-3
CVE-2024-26909 affecting package kernel for versions less than 6.6.29.1-3. An upgraded version of the package is available that resolves this issue...
CVE-2023-46045 affecting package graphviz for versions less than 2.42.4-10
CVE-2023-46045 affecting package graphviz for versions less than 2.42.4-10. A patched version of the package is available...
DEBIAN-CVE-2024-35176
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...
UBUNTU-CVE-2024-35176
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this...
ROS-20240516-01
Vulnerability of Less, a utility for UNIX-like text terminals, is related to incorrect processing of quotation marks in filename.c file. quotes in the filename.c file. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...
Important Photon OS Security Update - PHSA-2024-5.0-0273
Updates of 'less' packages of Photon OS have been released...