11 matches found
GHSA-WXW2-RWMH-VR8F electerm: electerm_install_script_CommandInjection Vulnerability Report
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...
electerm: electerm_install_script_CommandInjection Vulnerability Report
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...
CVE-2025-33230
A flaw was found in the NVIDIA Nsight Systems for Linux installer. An attacker could exploit this vulnerability by providing a malicious string as the installation path, leading to an operating system OS command injection. A successful exploit could result in escalation of privileges, arbitrary...
UBUNTU-CVE-2025-33230
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...
CVE-2025-33230
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...
CVE-2025-33230
CVE-2025-33230 is described as a vulnerability in NVIDIA Nsight Systems for Linux where the .run installer accepts a malicious string in the installation path, enabling an OS command injection. The exploit is labeled as potentially leading to privilege escalation, code execution, data tampering, ...
CVE-2025-33230
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...
CVE-2019-0158
Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel OpenVINO for Linux Installer Information Disclosure Vulnerability
Intel OpenVINO for Linux is an open visual inference and neural network optimization toolkit for Linux-based platforms from Intel USA. A security vulnerability exists in the installer in IntelR OpenVINOTM 2018 R3 and earlier versions for Linux-based platforms, which stems from a logic error in th...
SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities
No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...
Mozilla Linux installer does not properly set file permissions
Overview Mozilla's Linux installers may not properly set file permissions on the installed program files. A local user may then be able to modify or replace these files with malicious versions. Description Some versions of Mozilla's Linux installer may create installation and program files with...