CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

openSUSE Security Advisory (openSUSE-SU-2024:0210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:0210-1 Security update for global

This update for global fixes the following issues: - CVE-2024-38448: htags may allow code execution via untrusted dbpath boo1226420...

SUSE CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

DEBIAN-CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

UBUNTU-CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

CVE-2024-38448: Improper Control of Generation of Code

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...

PT-2024-28008 · Gnu +1 · Gnu Global +1

Name of the Vulnerable Software and Affected Versions: GNU Global versions 6.6.12 and earlier Description: The issue allows code execution in situations where dbpath also known as -d is untrusted, because shell metacharacters may be used. This can lead to execution of code when dbpath is not...

CVE-2024-38448

The htags component in GNU Global (versions through 6.6.12) is vulnerable to code execution when the dbpath (specified via the -d flag) is untrusted. This is caused by the improper handling of shell metacharacters within the path. The impact is significant as it allows for arbitrary command execu...

Buffer overflow

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server IDS 7.x through 11.x allow 1 remote attackers to execute arbitrary code via a long password and 2 remote authenticated users to execute arbitrary code via a long DBPATH value...

CVE-2008-0727

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server IDS 7.x through 11.x allow 1 remote attackers to execute arbitrary code via a long password and 2 remote authenticated users to execute arbitrary code via a long DBPATH value...

CVE-2008-0727: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server IDS 7.x through 11.x allow 1 remote attackers to execute arbitrary code via a long password and 2 remote authenticated users to execute arbitrary code via a long DBPATH value...

IBM Informix Dynamic Server multiple security vulnerabilities

Buffer overflow during authentication TCP/1526, buffer overflow on oversized DBPATH...

CVE-2007-3085: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbpath parameter to a useronline.php, b ucp.php, c setcookie.php, d sendpm.php, e search.php, f register.php, g profile.php, h post.php, i pmpshow.php, j pm.php, k...