CVE-2021-32692

Activity Watch is a free and open-source automated time tracker. Versions prior to 0.11.0 allow an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. The attacker can exploit this vulnerability by having the user visiting a website with the page title set to a...

ActivityWatch: Operating System Command Injection Vulnerability

ActivityWatch is a free and open source automated time tracker from ActivityWatch Open Source. An operating system command injection vulnerability exists in ActivityWatch versions prior to 0.11.0, which stems from a vulnerability that allows an attacker to execute arbitrary commands on any macOS...

PT-2022-10091

Name of the Vulnerable Software and Affected Versions Activity Watch versions prior to 0.11.0 Description Activity Watch is a free and open-source automated time tracker. The issue allows an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. This can be...

CVE-2021-32692

Activity Watch (aw-watcher-window) is vulnerable to OS command execution on macOS when pre-0.11.0 releases run. The flaw arises from printAppTitle.scpt, enabling an attacker to run arbitrary commands by persuading a user to visit a page with a crafted title (browser is the likely vector). Impact ...

AZL-34647 CVE-2022-4515 affecting package ctags for versions less than 6.1.0-1

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

AZL-12083 CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

DEBIAN-CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

Design/Logic Flaw

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

D-Link DIR-3040 Command Injection Vulnerability

D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

PT-2022-7037

Name of the Vulnerable Software and Affected Versions Exuberant Ctags affected versions not specified Description A flaw was found in Exuberant Ctags in the way it handles the "-o" option, which specifies the tag filename. A crafted tag filename specified in the command line or in the configurati...

CVE-2022-43486: Improper Control of Generation of Code

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices...

CVE-2022-43486

Buffalo network devices are affected by CVE-2022-43486, a hidden functionality vulnerability that lets a network-adjacent attacker with administrative privileges enable debug features and execute arbitrary commands on the device. The issue applies to Buffalo network devices; the exact affected mo...