Command injection

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization...

CVE-2019-10789

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization...

CVE-2019-10789

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization...

CVE-2019-10789: Improper Neutralization of Special Elements used in an OS Command

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization...

CVE-2019-18899 apt-cacher-ng insecure use of /run/apt-cacher-ng

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1...

PT-2020-10008 · Opensuse +1 · Opensuse Leap +1

Name of the Vulnerable Software and Affected Versions: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1 Description: The issue allows local attackers to influence the outcome of operations run by the apt-cacher-ng package in the user-owned directory /run/apt-cacher-ng with root...

UBUNTU-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DEBIAN-CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4609: Integer Overflow or Wraparound

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610: Integer Overflow or Wraparound

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

PT-2020-7678

Name of the Vulnerable Software and Affected Versions Libav versions prior to 0.8.13 Libav versions 9.x prior to 9.14 Libav versions 10.x prior to 10.2 Description The issue is related to an integer overflow in the get len function in libavutil/lzo.c, which allows remote attackers to execute...

CVE-2019-20373

LTSP LDM through 2.18.06 allows fat-client root access because the LDMUSERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script...