8 matches found
MAL-2025-17657 Malicious code in crashdb (npm)
The package crashdb was found to contain malicious code...
Malicious code in crashdb (npm)
The package crashdb was found to contain malicious code...
CVE-2016-9949
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
Code injection
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
CVE-2016-9949
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
CVE-2016-9949: Improper Control of Generation of Code
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...
PT-2016-7885
Name of the Vulnerable Software and Affected Versions Apport versions prior to 2.20.4 Description An issue in Apport allows remote attackers to execute arbitrary Python code. This occurs when Apport reads the CrashDB field in apport/ui.py and evaluates it as Python code if the field begins with a...
UBUNTU-CVE-2016-9949
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "". This allows remote attackers to execute arbitrary Python code...