Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/07/13 3:15 p.m.•25 views

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

SummaryGuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs...

5CVSS6.1AI score0.0015EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•37 views

PT-2026-59169

Summary GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs...

5CVSS6.1AI score0.0015EPSS
SaveExploits0References6
OSV
OSV
•added 2021/08/17 7:23 a.m.•10 views

OPENSUSE-SU-2021:2682-1 Security update for rpm

This update for rpm fixes the following issues: - Changed default package verification level to 'none' to be compatible to rpm-4.14.1 - Made illegal obsoletes a warning - Fixed a potential access of freed mem in ndb's glue code bsc1179416 - Added support for enforcing signature policy and payload...

7CVSS6.3AI score0.01706EPSS
SaveExploits0References8
Virtuozzo
Virtuozzo
•added 2020/01/26 12:00 a.m.•27 views

Product update: Virtuozzo PowerPanel Update 1 Hotfix 1 (7.0.4-39)

The update for Virtuozzo PowerPanel introduces stability and usability fixes. Vulnerability id: PP-643 Attach and detach backup tasks missing or undefined in the task log. Vulnerability id: PP-642 The 'vzapi-api' package not updated on the controller when upgrading PowerPanel. Vulnerability id:...

1.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•33 views

Scientific Linux Security Update : gfs2-utils on SL5.x i386/x86_64

Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker could use these flaws to overwrite an arbitrary file writable by a victim running those utilities typically root with the output of the utilities via a symbolic link attack. CVE-2008-6552 Thi...

6.9CVSS5.7AI score0.00379EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2009/09/02 8:00 a.m.•50 views

Low: Red Hat Security Advisory: gfs2-utils security and bug fix update

An updated gfs2-utils package that fixes multiple security issues and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The gfs2-utils package provides the user-space tools necessary to...

6.9CVSS5.8AI score0.00379EPSS
SaveExploits0References17
Rows per page
Query Builder