Lucene search
+L

686 matches found

OSV
OSV
added 2022/11/10 4:15 p.m.4 views

DEBIAN-CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8CVSS8.7AI score0.05159EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/10 4:15 p.m.13 views

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8CVSS9.7AI score
SaveExploits0References11
Prion
Prion
added 2022/11/10 4:15 p.m.29 views

Design/Logic Flaw

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

7.5CVSS9.5AI score0.05159EPSS
SaveExploits1References9Affected Software2
UbuntuCve
UbuntuCve
added 2022/11/10 4:15 p.m.37 views

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8CVSS7.5AI score0.05159EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2022/11/10 4:15 p.m.139 views

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8CVSS7.6AI score0.05159EPSS
SaveExploits1References15
OSV
OSV
added 2022/11/10 4:15 p.m.16 views

UBUNTU-CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8CVSS6.2AI score0.05159EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2022/11/10 12:00 a.m.88 views

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8AI score0.05159EPSS
SaveExploits1References11
Debian CVE
Debian CVE
added 2022/11/10 12:00 a.m.220 views

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

9.8CVSS3.2AI score0.05159EPSS
SaveExploits1
CVE
CVE
added 2022/11/10 12:00 a.m.203 views

CVE-2022-45063

CVE-2022-45063 affects the xterm terminal emulator, where code execution could occur via font operations, specifically OSC 50 responses that may carry Ctrl‑g and enable command execution within the vi line editing mode of Zsh. Affected: xterm prior to version 375. Several connected advisories ind...

9.8CVSS9.4AI score0.05159EPSS
SaveExploits1References13Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/10 12:00 a.m.24 views

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

7.3AI score0.05159EPSS
SaveExploits1References11
Rockylinux
Rockylinux
added 2022/11/08 6:27 a.m.18 views

zsh bug fix and enhancement update

An update is available for zsh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

1.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/11/04 12:00 a.m.20 views

Amazon Linux 2022 : zsh, zsh-html (ALAS2022-2022-180)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-180 advisory. A vulnerability was found in zsh in the parsecolorchar function of prompt.c file. This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by ...

7.8CVSS7.8AI score0.0198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/23 12:00 a.m.8 views

PT-2022-6818

Name of the Vulnerable Software and Affected Versions xterm versions prior to 375 Description The issue is related to the lack of input validation in the xterm terminal emulator, which can be exploited by a remote attacker to gain access to confidential data, compromise its integrity, and cause a...

9.8CVSS6.9AI score0.05159EPSS
SaveExploits1References62
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:00 a.m.37 views

Amazon Linux 2022 : zsh, zsh-html (ALAS2022-2022-117)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-117 advisory. A vulnerability was found in zsh in the parsecolorchar function of prompt.c file. This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by ...

7.8CVSS7.8AI score0.0198EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/08/01 12:00 a.m.10 views

Fedora: Security Advisory for powerline-go (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/17 1:16 a.m.29 views

[SECURITY] Fedora 35 Update: powerline-go-1.22.1-2.fc35

A Powerline like prompt for Bash, ZSH and Fish. - Shows some important details about the git/hg branch - Changes color if the last command exited with a failure code - If you're too deep into a directory tree, shortens the displayed path with an ellipsis - Shows the current Python virtualenv...

9.3CVSS1.6AI score0.0995EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2022/07/15 12:00 a.m.11 views

PT-2022-20592 · Microsoft +1 · Powershell +2

Name of the Vulnerable Software and Affected Versions: Shescape versions prior to 1.5.8 Description: The issue impacts users of the escape or escapeAll functions with the interpolation option set to true. If an attacker can include whitespace in their input, they can invoke shell-specific behavio...

9.8CVSS9.5AI score0.01895EPSS
SaveExploits1References10
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.17 views

Fedora: Security Advisory for powerline-go (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.24 views

[SECURITY] Fedora 36 Update: powerline-go-1.21.0-4.fc36

A Powerline like prompt for Bash, ZSH and Fish. - Shows some important details about the git/hg branch - Changes color if the last command exited with a failure code - If you're too deep into a directory tree, shortens the displayed path with an ellipsis - Shows the current Python virtualenv...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
OPENSUSE Linux
OPENSUSE Linux
added 2022/06/15 12:00 a.m.54 views

Security update for caddy (moderate)

openSUSE Security Update: Security update for caddy Announcement ID: openSUSE-SU-2022:10007-1 Rating: moderate References: 1200279 Cross-References: CVE-2022-297182 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update f...

6.1CVSS6.2AI score0.01034EPSS
SaveExploits0References1
Rows per page
Query Builder