SUSE CVE-2018-10992

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument, because the GNU...

SUSE CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

VulnCheck KEV: CVE-2018-19518

University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without preventing argument injection, which might allow...

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. PoC javascript const clone =...

Argument Injection

phpxmlrpc/phpxmlrpc is vulnerable to Argument Injection. The vulnerability exists in multiple functions of Client.php and Wrapper.php due to improper neutralization of argument delimiters which allows an attacker to access the local file or connect to undesired URLs instead of the intended target...

Argument Injection

froxlor/froxlor is vulnerable to argument injection. The vulnerability exists in the multiple functions in the library, allowing an attacker to inject and execute malicious HTML through the theme parameter...

GHSA-3V7M-2JRH-VC93 Froxlor vulnerable to Argument Injection

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

Froxlor vulnerable to Argument Injection

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

Design/Logic Flaw

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4864

CVE-2022-4864 affects Froxlor (froxlor/froxlor) prior to 2.0.0-beta1. The root cause is argument/parameter injection in the web application, evidenced by an HTML injection PoC and references to parameter handling weaknesses in the vulnerable release. Impact is limited to confidential/integrity ex...

CVE-2022-4864 Argument Injection in froxlor/froxlor

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

PT-2022-28149 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to Argument Injection in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve the...

Mageia: Security Advisory (MGASA-2022-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0471 Updated xfce4-settings packages fix security vulnerability

argument injection vulnerability in xfce4-mime-helper from the xfce4-settings package...

Updated xfce4-settings packages fix security vulnerability

argument injection vulnerability in xfce4-mime-helper from the xfce4-settings package...

Siemens SIMATIC WinCC OA Ultralight Client

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Debian: Security Advisory (DSA-5296-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...