2341 matches found
AZL-62273 CVE-2011-10007 affecting package perl-File-Find-Rule 0.34-15
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...
CVE-2011-10007
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...
UBUNTU-CVE-2011-10007
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...
CVE-2011-10007 File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...
CVE-2011-10007
The File::Find::Rule module (through version 0.34 ) for Perl is vulnerable to Arbitrary Code Execution (CWE-78). The root cause is that the module opens a file handle using the 2-argument form of open(), which allows an attacker-controlled filename to provide the MODE parameter. This effectively ...
CVE-2011-10007
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when "grep" encounters a crafted filename. A file handle is opened with the 2 argument form of "open" allowing an attacker controlled filename to provide the MODE parameter to "open", turning the filename into a...
CVE-2011-10007
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...
MetaCPAN File::Find::Rule 操作系统命令注入漏洞
MetaCPAN File::Find::Rule is a file find module from the MetaCPAN Foundation. An operating system command injection vulnerability exists in MetaCPAN File::Find::Rule version 0.34 and earlier, which stems from improper use of the open function when dealing with specially crafted filenames, and cou...
CVE-2011-10007: Improper Neutralization of Special Elements used in an OS Command
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...
PT-2025-23919
Name of the Vulnerable Software and Affected Versions File::Find::Rule versions through 0.34 Description The issue allows for Arbitrary Code Execution when the grep function encounters a crafted filename. This is due to a file handle being opened with the 2 argument form of open, allowing an...
Debian dsa-5936 : libfile-find-rule-perl - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5936 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5936-1 [email protected] https://www.debian.org/security/...
DSA-5936-1 libfile-find-rule-perl - security update
Bulletin has no description...
DLA-4209-1 libfile-find-rule-perl - security update
Bulletin has no description...
CVE-2024-32023
Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a path injection in the commongui.py findandreplace function. This vulnerability is fixed in 23.1.5...
CVE-2024-53757
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SocialEvolution WP Find Your Nearest wp-find-your-nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through = 0.3.1...
CVE-2023-30192
Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find...
CVE-2023-21284
In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-42571
Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device...
CVE-2022-1472
The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection...