Lucene search
K

49 matches found

OSV
OSV
added 2026/05/27 1:2 p.m.3 views

USN-8321-1 papers vulnerability

It was discovered that Papers incorrectly handled PDF /GoToR actions. If a user were tricked into opening a specially crafted PDF file, an attacker could use this issue to manipulate command lines and possibly execute arbitrary code...

5.8AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/09 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-016804)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016804 advisory. A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines. Tenable has...

7.5CVSS5.7AI score0.00316EPSS
Exploits0References4
OSV
OSV
added 2026/03/18 10:16 p.m.2 views

DEBIAN-CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

6.1CVSS5.6AI score0.00022EPSS
Exploits2References1
UbuntuCve
UbuntuCve
added 2026/03/18 10:16 p.m.2 views

CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

6.1CVSS6.1AI score0.00022EPSS
Exploits2References5
ATTACKERKB
ATTACKERKB
added 2026/03/18 9:25 p.m.2 views

CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

3.6CVSS5.9AI score0.00022EPSS
Exploits2References4Affected Software1
Snyk
Snyk
added 2026/03/18 6:54 a.m.1 views

Information Exposure

Overview Glances is an A cross-platform curses-based monitoring tool Affected versions of this package are vulnerable to Information Exposure via the web server which runs without authentication by default when started with glances -w. An attacker can access sensitive system information, includin...

8.7CVSS5.8AI score0.04747EPSS
Exploits1References2
OSV
OSV
added 2026/03/18 6:16 a.m.3 views

UBUNTU-CVE-2026-32596

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with glances -w, exposing REST API with sensitive system information including process command-lines containing credentials passwords, API keys,...

8.7CVSS5.8AI score0.04747EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/18 5:18 a.m.1 views

CVE-2026-32596

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with glances -w, exposing REST API with sensitive system information including process command-lines containing credentials passwords, API keys,...

8.7CVSS5.8AI score0.04747EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/14 12:0 a.m.2 views

PT-2026-25844

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, a system cross-platform monitoring tool, has an issue where the web server runs without authentication by default when started with glances -w. This exposes a REST API containing sensitive...

8.7CVSS5.9AI score0.04747EPSS
Exploits1References28
OSV
OSV
added 2025/10/19 10:31 p.m.2 views

JLSEC-2025-168 A flaw was found in GLib

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

7.5CVSS6.6AI score0.00316EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2003-0357

Malware in sbrugna...

5CVSS6.4AI score0.00449EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-22903

Malicious code in bioql PyPI...

7.5CVSS4.7AI score0.00316EPSS
Exploits0References3
NVD
NVD
added 2025/07/28 1:15 p.m.2 views

CVE-2025-4056

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

7.5CVSS0.00316EPSS
Exploits0References3
OSV
OSV
added 2025/07/28 1:15 p.m.1 views

CVE-2025-4056

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

7.5CVSS7AI score0.00316EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/07/28 12:40 p.m.2 views

CVE-2025-4056

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

7.5CVSS7.2AI score0.00316EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/07/28 12:40 p.m.5 views

CVE-2025-4056

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

7.5CVSS4.8AI score0.00316EPSS
Exploits0
Cvelist
Cvelist
added 2025/07/28 12:40 p.m.6 views

CVE-2025-4056 Glib: glib crash after long command line

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

7.5CVSS0.00316EPSS
Exploits0References3
CVE
CVE
added 2025/07/28 12:40 p.m.31 views

CVE-2025-4056

CVE-2025-4056 affects GLib. The issue is a denial-of-service on Windows when an application spawns a program with long command lines. Public sources in connected advisories note GLib vulnerability details and remediation: upgrading GLib to a patched release (e.g., GLib 2.84.1+ per EulerOS/Nessus ...

7.5CVSS4AI score0.00316EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/07/23 7:39 p.m.3 views

CLSA-2025-1753299555 traceroute: Fix of CVE-2023-46316

CVE-2023-46316: parse command lines properly in wrapper scripts...

5.5CVSS6AI score0.00038EPSS
Exploits2References1
OSV
OSV
added 2024/07/12 1:55 p.m.16 views

SUSE-SU-2024:2468-1 Security update for traceroute

This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines bsc1216591...

5.5CVSS5.8AI score0.00038EPSS
Exploits2References3
Rows per page
Query Builder