613 matches found
CVE-2022-45063: Improper Neutralization of Special Elements used in a Command
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...
Xterm 命令注入漏洞
Xterm is a terminal emulator for the X Window System by Thomas Dickey, a personal developer. It is intended to provide Dec Vt102 and Tektronix 4014 compatible terminals for programs that cannot use the window system directly. A security vulnerability exists in versions prior to Xterm 375. An...
CVE-2022-45063
CVE-2022-45063 affects the xterm terminal emulator, where code execution could occur via font operations, specifically OSC 50 responses that may carry Ctrl‑g and enable command execution within the vi line editing mode of Zsh. Affected: xterm prior to version 375. Several connected advisories ind...
CVE-2022-45063
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...
CVE-2022-3844
A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...
Webmin 跨站脚本漏洞
Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. Webmin suffers from a cross-site scripting vulnerability that originates in an unknown function of xterm/index.cgi that could lead to cross-site scripting issues...
CVE-2022-3844: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...
CVE-2022-3844 Webmin index.cgi cross site scripting
A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...
PT-2022-24410 · Webmin · Webmin
Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 2.003 Description: A problematic issue was found in Webmin, affecting an unknown function of the file xterm/index.cgi, leading to basic cross site scripting. The manipulation can be launched remotely. Recommendations:...
PT-2022-6818
Name of the Vulnerable Software and Affected Versions xterm versions prior to 375 Description The issue is related to the lack of input validation in the xterm terminal emulator, which can be exploited by a remote attacker to gain access to confidential data, compromise its integrity, and cause a...
CVE-2021-27135 affecting package xterm for versions less than 372-1
CVE-2021-27135 affecting package xterm for versions less than 372-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-24130 affecting package xterm for versions less than 372-1
CVE-2022-24130 affecting package xterm for versions less than 372-1. An upgraded version of the package is available that resolves this issue...
GLSA-202208-22 : xterm: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202208-22 xterm: Multiple Vulnerabilities - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence. CVE-2021-27135 ...
xterm: Multiple Vulnerabilities
Background xterm is a terminal emulator for the X Window system. Description Multiple vulnerabilities have been discovered in xterm. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...
[SECURITY] Fedora 36 Update: golang-github-gdamore-tcell-1.4.0-6.fc36
Tcell is a Go package that provides a cell based view for text terminals, like xterm. It was inspired by termbox, but includes many additional improvements...
[SECURITY] Fedora 35 Update: golang-github-tomnomnom-xtermcolor-0.1.2-8.fc35
Find the closest xterm color to anything implementing color.Color...
Fedora: Security Advisory for golang-github-gdamore-tcell (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-github-gdamore-tcell-1.4.0-5.fc35
Tcell is a Go package that provides a cell based view for text terminals, like xterm. It was inspired by termbox, but includes many additional improvements...
Fedora: Security Advisory for golang-github-tomnomnom-xtermcolor (FEDORA-2022-ba365d3703)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...