CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2020-36767

The CVE-2020-36767 entry concerns tinyfiledialogs (tiny file dialogs). The connected sources confirm that versions before 3.8.0 were vulnerable to shell metacharacters in input fields such as titles and messages, due to an incomplete fix. Affected software is the tinyfiledialogs library (C/C++ he...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

PT-2023-30311 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.15.0 Description: The issue allows shell metacharacters, such as a backquote or a dollar sign, in titles, messages, and other input data. This problem exists due to an incomplete fix for a previous issue,...

CVE-2020-36767: Improper Control of Generation of Code

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

CVE-2023-47104

CVE-2023-47104 affects the tinyfiledialogs library (tiny file dialogs). It allows shell metacharacters (e.g., backquote, dollar sign) in user-visible input like titles and messages due to an incomplete fix of CVE-2020-36767. Affected versions are before 3.15.0. The issue's root cause is improper ...

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

CVE-2023-47104: Improper Neutralization of Special Elements used in an OS Command

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

PT-2023-11904 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.8.0 Description: The issue allows shell metacharacters in titles, messages, and other input data. Recommendations: For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...

tinyfiledialogs-rs Security Vulnerabilities

tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability in tinyfiledialogs-rs prior to version 3.8.0, which stems from an incomplete fix in CVE-2020-36767, allows the use of shell metacharacters in headers, messages, and other input data, leading to code...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

CVE-2023-46321: Improper Output Neutralization for Logs

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...

PT-2023-29958 · Iterm2 · Iterm2

Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize paths in x-man-page URLs. This can lead to the inclusion of shell metacharacters in a...

CVE-2023-46321

CVE-2023-46321 affects iTerm2, specifically the iTermSessionLauncher.m component, where paths in x-man-page URLs are not sanitized. This allows shell metacharacters to reach a /usr/bin/man command line, enabling a potentially dangerous injection path as described in multiple sources. The NVD entr...

CVE-2023-46306: Improper Neutralization of Special Elements used in an OS Command

The web administration interface in NetModule Router Software NRSW 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php deviceid parameter. This occurs because another thread can be start...