Lucene search
K

8 matches found

OSV
OSV
added 2026/01/28 8:16 p.m.2 views

UBUNTU-CVE-2025-61731

Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a...

7.8CVSS5.7AI score0.00012EPSS
Exploits0References4
OSV
OSV
added 2026/01/28 7:7 p.m.3 views

GO-2026-4339 Arbitrary file write using cgo pkg-config directive in cmd/go

Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a...

7.8CVSS5.9AI score0.00012EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:19 a.m.1 views

SUSE CVE-2015-3259

Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument...

6.8CVSS7.4AI score0.00056EPSS
Exploits0References12
Github Security Blog
Github Security Blog
added 2022/02/10 11:42 p.m.36 views

karma-mojo enables OS Command Injection

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

9.8CVSS9.3AI score0.01227EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/02/10 11:42 p.m.13 views

GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

9.8CVSS9.8AI score0.01227EPSS
Exploits1References3
OSV
OSV
added 2020/04/02 10:15 p.m.1 views

CVE-2020-7626

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

9.8CVSS6AI score
Exploits0References2
NVD
NVD
added 2020/04/02 10:15 p.m.10 views

CVE-2020-7626

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

9.8CVSS9.8AI score0.01227EPSS
Exploits1References2
Cvelist
Cvelist
added 2020/04/02 9:23 p.m.11 views

CVE-2020-7626

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

9.8AI score0.01227EPSS
Exploits1References2
Rows per page
Query Builder