EUVD-2003-0821

Malware in sbrugna...

EUVD-2003-0938

Malware in sbrugna...

EUVD-2005-2926

Malware in sbrugna...

EUVD-1999-1366

Malware in sbrugna...

EUVD-2003-0643

Malware in sbrugna...

EUVD-2005-2811

Malware in sbrugna...

EUVD-2006-0204

Malware in sbrugna...

EUVD-2002-0132

Malware in sbrugna...

EUVD-2002-0143

Malware in sbrugna...

EUVD-2007-2827

Malware in sbrugna...

EUVD-2003-1463

Malware in sbrugna...

EUVD-2003-0264

Malware in sbrugna...

CVE-2003-0454

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable...

GHSA-GP2J-MG4W-2RH5 chrome-launcher subject to OS Command Injection

chrome-launcher prior to 0.13.2 is subject to OS Command Injection via the $HOME environment variable in Linux operating systems. This issue is patched in version 0.13.2...

Google chrome-launcher OS command injection vulnerability

Google chrome-launcher is a launcher for launching the Chrome browser from Node.js by Google USA. An operating system command injection vulnerability exists in Google chrome-launcher all versions, which can be exploited to execute arbitrary commands by controlling the $ HOME environment variable ...

CVE-2020-7645

All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems...

CVE-2020-7645

All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems...

CVE-2020-7645

All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems...

procps: Local privilege escalation in top

If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory without any security check. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of...

Code injection

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...