Improper Output Neutralization for Logs

Overview Affected versions of this package are vulnerable to Improper Output Neutralization for Logs of ANSI escape sequences. When running in a console supporting ANSI escape sequences, an attacker can send specially crafted requests to manipulate the console and the clipboard, potentially...

Apache Tomcat 安全漏洞

Apache Tomcat is a lightweight Web application server from the American Apache Apache Foundation. It is used to implement support for Servlets and JavaServer Page JSP. A security vulnerability exists in Apache Tomcat that stems from not properly escaping ANSI escape sequences, which could lead to...

openSUSE Security Advisory (SUSE-SU-2025:03082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for python-maturin

This update for python-maturin fixes the following issues: CVE-2025-58160: terminal escape injection via ANSI sequences from untrusted input bsc1249011. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:03082-1 Security update for python-maturin

This update for python-maturin fixes the following issues: - CVE-2025-58160: terminal escape injection via ANSI sequences from untrusted input bsc1249011...

Improper Neutralization

Active Record is vulnerable to Improper Neutralization. The vulnerability is due to unescaped ANSI sequences being logged when IDs are passed to find or similar methods...

Linux Distros Unpatched Vulnerability : CVE-2020-7694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP...

AZL-56370 CVE-2024-52005 affecting package git 2.45.4-3

Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the...

RARLAB WinRAR 安全漏洞

WinRAR is a file compressor. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. A security vulnerability exists in RARLAB WinRAR versions prior to 7.00. An attacker could exploit this vulnerability to spoof screen output or cause a denial of...

[SECURITY] Fedora 38 Update: python-pygments-2.14.0-2.fc38

Pygments is a generic syntax highlighter suitable for use in code hosting, forums, wikis or other applications that need to prettify source code. Highlights are: a wide range of over 500 languages and other text formats is supported special attention is paid to details that increase highlighting...

PT-2024-22150 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.32.1 through 1.40.x Description: A maliciously crafted permission request can show a spoofed permission prompt by inserting a broken ANSI escape sequence into the request contents. Deno strips any ANSI escape sequences from th...

Design/Logic Flaw

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

Advisory ROSA-SA-2023-2238

software: less 608 WASP: ROSA-CHROME packageevrstring: less-608-2.src.rpm CVE-ID: CVE-2022-46663 BDU-ID: 2023-00696 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Less UNIX-like UNIX text terminal utility is related to incorrect filtering of embedded ANSI sequences when processing the -R...

puppet: insufficient validation of agent names in CN of SSL certificate requests

lib/puppet/ssl/certificateauthority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request CSR, which makes it easier for user-assisted remote attackers to trick...