Remote Code Execution (RCE)

blamer is vulnerable to remote code execution. The vulnerability exists due to the improper handling of the values of args in the blameByFile function...

Blamer Code Injection Vulnerability

blamer is a tool for obtaining code author information from a version control system. A code injection vulnerability exists in blamer 1.0.0 and prior versions, which arises from the failure of a network system or product to properly filter specific elements of externally input data during the...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

Code injection

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

CVE-2020-8137

CVE-2020-8137 affects the blamer tool (versions 1.0.0 and earlier). The vulnerability is a code injection flaw caused by improper handling/filtration of externally supplied input during code segment construction (as described across multiple sources, including NVD, Red Hat, GHSA, OSV, CNVD, Verac...

PT-2020-19973

Name of the Vulnerable Software and Affected Versions blamer versions 1.0.0 and earlier Description A code injection issue may result in remote code execution when the input can be controlled by an attacker. Recommendations For versions 1.0.0 and earlier, at the moment, there is no information...

CVE-2020-8137: Improper Control of Generation of Code

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker...

Blamer Operating System Command Injection Vulnerability

Blamer is a tool for obtaining code author information from version control systems. An operating system command injection vulnerability exists in versions of Blamer prior to 1.0.1, which can be exploited by an attacker to inject arbitrary commands as part of the parameters provided to Burmer...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

Design/Logic Flaw

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

CVE-2019-10807

Blamer (software) is affected by an OS command injection vulnerability. In versions prior to 1.0.1, user-provided arguments to Blamer can be exploited to execute arbitrary commands on the system. The root cause is improper handling of input that enables injection via the command execution path. I...

CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...

PT-2020-9157

Name of the Vulnerable Software and Affected Versions Blamer versions prior to 1.0.1 Description The issue allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer. Recommendations For versions prior to 1.0.1, update to versio...

CVE-2019-10807: Improper Neutralization of Special Elements used in an OS Command

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...