426 matches found
CVE-2026-58459
gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...
CVE-2026-58459 gpsd gpsprof Command Injection via gnuplot plot title subtype field
gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...
CVE-2026-58459 gpsd gpsprof Command Injection via gnuplot plot title subtype field
gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...
CVE-2026-58459
CVE-2026-58459 affects gpsd (through release-3.27.5) with a command injection in the gpsprof workflow. The subtype value of the GPS device (sourced from a DEVICES JSON log entry or NMEA PGRMT sentence) is written into a generated gnuplot program via a set title statement that escapes only double ...
CVE-2026-58459
gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...
PT-2026-56825
Name of the Vulnerable Software and Affected Versions gpsd versions prior to 3.27.6 Description A command injection issue exists in the gpsprof tool. Attackers who can control the GPS device subtype value can execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot titl...
JLSEC-2026-358
A flaw was found in gnuplot. The CANVAStext function may lead to a segmentation fault and cause a system crash...
JLSEC-2026-355
A flaw was found in gnuplot. The plot3dpoints function may lead to a segmentation fault and cause a system crash...
JLSEC-2026-359
A flaw was found in gnuplot. The X11graphics function may lead to a segmentation fault and cause a system crash...
JLSEC-2026-356
A flaw was found in gnuplot. The GetAnnotateString function may lead to a segmentation fault and cause a system crash...
JLSEC-2026-357
A flaw was found in gnuplot. The xstrftime function may lead to a segmentation fault, causing a system crash...
CVE-1999-0409
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access...
ROS-20251216-7304
Vulnerability in gnuplot related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251216-7312
Vulnerability in gnuplot related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251216-7305
Vulnerability in gnuplot related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251216-7306
Vulnerability in gnuplot related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service...
K000158030: gnuplot vulnerability CVE-2020-25969
Security Advisory Description gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest. CVE-2020-25969 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported...
EUVD-2020-18243
Malware in sbrugna...