5672 matches found
CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-4641: Improper Input Validation
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-3432
Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...
CVE-2008-3432
Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...
Heap overflow
Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...
CVE-2008-3432
CVE-2008-3432 describes a heap-based overflow in Vim’s mch_expand_wildcards (os_unix.c) on Vim 6.2/6.3 that can allow remote code execution via shell metacharacters in filenames. Connected advisories (RHSA-2008:0617, Oracle Linux ELSA-2008-0617, Scientific Linux updates) confirm Vim patches exist...
PT-2008-4835 · Vim +1 · Vim +1
Name of the Vulnerable Software and Affected Versions: Vim versions 6.2 through 6.3 Description: The issue is related to a heap-based buffer overflow in the mch expand wildcards function, which can be exploited by user-assisted attackers to execute arbitrary code via shell metacharacters in...
CVE-2008-4318
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to 1 whois.php or 2 netcmd.php...
Code injection
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to 1 whois.php or 2 netcmd.php...
CVE-2008-4318
Observer 0.3.2.1 and earlier are affected by CVE-2008-4318, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the query parameter of whois.php or netcmd.php. The vulnerability is reported as a vulnerable remote command execution in these PHP scripts, but...
CVE-2008-4318
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to 1 whois.php or 2 netcmd.php...
CVE-2008-4318: Improper Input Validation
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to 1 whois.php or 2 netcmd.php...
CVE-2008-3907
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL...
CVE-2008-3907
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL...
Open redirect
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL...
DEBIAN-CVE-2008-3904
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2008-3904
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...