5658 matches found
CVE-2011-1412
sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...
[slackware-security] dhcpcd (SSA:2011-210-02)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2011-210-02 New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+...
CubeCart 2.0.7 Cross Site Scripting / SQL Injection
Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...
CVE-2011-2471
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...
Design/Logic Flaw
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...
CVE-2011-2471
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...
CVE-2011-2471
CVE-2011-2471 concerns utils/opcontrol in OProfile 0.9.6 and earlier, where local users could gain privileges via shell metacharacters in (1) --vmlinux, (2) --session-dir, or (3) --xen, tied to the daemonrc file and the do_save_setup/do_load_setup functions. The related OpenVAS/Nessus entries cor...
Design/Logic Flaw
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
CVE-2011-1760
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
CVE-2011-2471: Undefined Security Weakness
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...
CVE-2011-1760
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
CVE-2011-2471
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...
CVE-2011-1760: Improper Control of Generation of Code
utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...
WebSVN 2.3.2 - Unproper Metacharacters Escaping exec() Remote Command Injection
WebSVN 2.3.2 - Unproper Metacharacters Escaping exec Remote Command Injection WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction:...
CVE-2010-2246
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
DEBIAN-CVE-2010-2246
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2010-2246
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
Code injection
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2010-2246
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2010-2246
CVE-2010-2246 affects feh prior to 1.8, where enabling --wget-timestamp allows remote command execution via shell metacharacters in a URL. The issue is confirmed in multiple OpenVAS/Gentoo/Gentoo GLSA entries, with CVSS v2 base score 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P). Mitigation documented in GLSA...