4117 matches found
emacs: command execution via shell metacharacters
A flaw was found in the Emacs package. This flaw allows attackers to execute commands via shell metacharacters in the name of a source-code file...
SUSE CVE-2023-28617
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
CVE-2020-36767
tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...
Design/Logic Flaw
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
Input validation
tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...
CVE-2020-36767
tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...
PT-2023-11904 · Unknown · Tinyfiledialogs
Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.8.0 Description: The issue allows shell metacharacters in titles, messages, and other input data. Recommendations: For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...
CVE-2020-36767
The CVE-2020-36767 entry concerns tinyfiledialogs (tiny file dialogs). The connected sources confirm that versions before 3.8.0 were vulnerable to shell metacharacters in input fields such as titles and messages, due to an incomplete fix. Affected software is the tinyfiledialogs library (C/C++ he...
tinyfiledialogs-rs Security Vulnerabilities
tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability exists in tinyfiledialogs-rs prior to version 3.8.0 that stems from allowing shell metacharacters to be used in headers, messages, and other input data, leading to code execution...
CVE-2020-36767
tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
tinyfiledialogs-rs Security Vulnerabilities
tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability in tinyfiledialogs-rs prior to version 3.8.0, which stems from an incomplete fix in CVE-2020-36767, allows the use of shell metacharacters in headers, messages, and other input data, leading to code...
CVE-2023-47104
CVE-2023-47104 affects the tinyfiledialogs library (tiny file dialogs). It allows shell metacharacters (e.g., backquote, dollar sign) in user-visible input like titles and messages due to an incomplete fix of CVE-2020-36767. Affected versions are before 3.15.0. The issue's root cause is improper ...
PT-2023-30311 · Unknown · Tinyfiledialogs
Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.15.0 Description: The issue allows shell metacharacters, such as a backquote or a dollar sign, in titles, messages, and other input data. This problem exists due to an incomplete fix for a previous issue,...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...