GLSA-202105-13 : Mumble: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-13 Mumble: User-assisted execution of arbitrary code Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted server list web page using...

GLSA-202105-10 : GNOME Autoar: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-10 GNOME Autoar: User-assisted execution of arbitrary code It was discovered that GNOME Autoar could extract files outside of the intended directory. Impact : A remote attacker could entice a user to open a specially crafte...

GNU Screen: User-assisted execution of arbitrary code

Background GNU Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells. Description It was discovered that GNU screen did not properly handle certain UTF-8 character sequences. Impact A remote attacker could entice a user...

Nextcloud Desktop Client: User-assisted execution of arbitrary code

Background The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. Description It was discovered that Nextcloud Desktop Client did not validate URLs. Impact A remote attacker could entice a user to connect to a malicious Nextcloud server to cause the...

rxvt-unicode: User-assisted execution of arbitrary code

Background rxvt-unicode urxvt is a clone of the rxvt terminal emulator. Description It was discovered that rxvt-unicode did not properly handle certain escape sequences. Impact A remote attacker could entice a user to run a program where attacker controls the output inside a rxvt terminal window,...

GLSA-202104-01 : Git: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202104-01 Git: User-assisted execution of arbitrary code It was discovered that Git could be fooled into running remote code during a clone on case-insensitive file systems with support for symbolic links, if Git is configured...

GLSA-202012-12 : libass: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202012-12 libass: User-assisted execution of arbitrary code It was discovered that libass did not properly handle Advanced Substation Alpha/Substation Alpha subtitle format files. Impact : A remote attacker could entice a user to...

OS Command Injection

newsbeuter is vulnerable to OS Command Injection. Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a...

GLSA-202003-58 : UnZip: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-58 UnZip: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

GLSA-202003-59 : libvpx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-59 libvpx: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

GLSA-202003-23 : libjpeg-turbo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-23 libjpeg-turbo: User-assisted execution of arbitrary code It was discovered that libjpeg-turbo incorrectly handled certain JPEG images. Impact : A remote attacker could entice a user to open a specially crafted JPEG file ...

CVE-2014-7914: Incorrect Authorization

btif/src/btifdm.c in Android before 5.1 does not properly enforce the temporary nature of a Bluetooth pairing, which allows user-assisted remote attackers to bypass intended access restrictions via crafted Bluetooth packets after the tapping of a crafted NFC tag...

CVE-2013-5582

Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AAv3.2.exe file...

CVE-2013-5582: Improper Authentication

Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AAv3.2.exe file...

CVE-2012-4980

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

Stack overflow

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

CVE-2012-4980

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

CVE-2012-4980: Out-of-bounds Write

Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code...

GLSA-201911-02 : pump: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201911-02 pump: User-assisted execution of arbitrary code It was discovered that there was an arbitrary code execution vulnerability in the pump DHCP/BOOTP client. Impact : A remote attacker, by enticing a user to connect to a...

CVE-2008-1467

CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to "received URLs in the message window." NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by t...