CVE-2023-22762: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

PT-2023-2101 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to an insufficient session expiration in the command line interface of ArubaOS. This allows an attacker to maintain a session on an affected device even after the accou...

CVE-2023-22769: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2023-22763: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

PT-2023-1674

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to authenticated command injection vulnerabilities in the command line interface of ArubaOS. These vulnerabilities can be exploited to execute arbitrary commands as a...

DEBIAN-CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

UBUNTU-CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

Input validation

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

UBUNTU-CVE-2023-23108

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...

CRASM 数字错误漏洞

CRASM is a portable cross assembler for the 6800, 6801, 6803, 6502, 65C02, and Z80 by Colin Bourassa, Individual Developer. A security vulnerability exists in CRASM version 1.8-3, which stems from invalid input validation, where a specific file crasm passed to a command-line application may cause...

PT-2023-18843 · Crasm +1 · Crasm +1

Name of the Vulnerable Software and Affected Versions: crasm versions 1.8-3 Description: The issue arises from invalid input validation in specific files passed to the command line application, leading to a NULL pointer dereference in the function Xasc. Recommendations: For crasm versions 1.8-3, ...

CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

CVE-2023-23108

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...

PT-2023-18844 · Crasm +1 · Crasm +1

Name of the Vulnerable Software and Affected Versions: crasm versions 1.8-3 Description: The issue arises from invalid input validation in specific files passed to the command line application, leading to a divide by zero fault in the function opdiv. Recommendations: For crasm versions 1.8-3, as ...

CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

[SECURITY] Fedora 37 Update: kde-cli-tools-5.27.1-1.fc37

Provides several KDE and Plasma specific command line tools to allow better interaction with the system...

OESA-2023-1124 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: A flaw was found in the Curl package, where the HSTS mechanism could fail when multiple transfers are done in parallel, as the HSTS cache file...

git: Fix of 4 CVEs

CVE-2022-41903: fix out-of-bounds write caused by integer overflow - CVE-2021-40330: forbid newlines in host and path - CVE-2022-39260: reject too long command line strings - CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links...

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.

...