Lucene search
+L

25 matches found

CVE
CVE
•added 2013/08/29 10:00 a.m.•91 views

CVE-2013-5647

CVE-2013-5647 affects the Ruby gem Sounder (library: lib/sounder/sound.rb) version 1.0.1. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, indicating a remote command execution flaw in file-name handling. Several sources (NVD, Red Hat...

7.5CVSS7.9AI score0.01987EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2013/08/29 10:00 a.m.•39 views

CVE-2013-5647

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...

7.6AI score0.01987EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/29 12:00 a.m.•10 views

CVE-2013-5647: Improper Control of Generation of Code

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...

7.5CVSS6.4AI score0.01987EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2013/08/29 12:00 a.m.•6 views

PT-2013-5709

Name of the Vulnerable Software and Affected Versions sounder gem version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, specifically in the lib/sounder/sound.rb file. Recommendations For sounder gem version 1.0.1, conside...

7.5CVSS0.01987EPSS
SaveExploits1References7
RubySec
RubySec
•added 2013/08/14 12:00 a.m.•27 views

Sounder Gem for Ruby File Name Handling Arbitrary Command Execution

Sounder Gem for Ruby contains a flaw that is triggered during the handling of file names. This may allow a context-dependent attacker to execute arbitrary commands...

7.5CVSS3AI score0.01987EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder