Lucene search
K

11 matches found

OSV
OSV
added 2026/04/16 9:24 p.m.2 views

GHSA-WXW2-RWMH-VR8F electerm: electerm_install_script_CommandInjection Vulnerability Report

Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...

9.8CVSS6.1AI score0.00194EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2026/04/16 9:24 p.m.3 views

electerm: electerm_install_script_CommandInjection Vulnerability Report

Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...

9.8CVSS5.9AI score0.00194EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/21 6:29 p.m.2 views

CVE-2025-33230

A flaw was found in the NVIDIA Nsight Systems for Linux installer. An attacker could exploit this vulnerability by providing a malicious string as the installation path, leading to an operating system OS command injection. A successful exploit could result in escalation of privileges, arbitrary...

7.3CVSS5.9AI score0.00027EPSS
Exploits0References4
OSV
OSV
added 2026/01/20 6:16 p.m.0 views

UBUNTU-CVE-2025-33230

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...

7.3CVSS5.9AI score0.00027EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/20 5:55 p.m.2 views

CVE-2025-33230

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...

7.3CVSS5.8AI score0.00027EPSS
Exploits0References3
CVE
CVE
added 2026/01/20 5:55 p.m.7 views

CVE-2025-33230

CVE-2025-33230 is described as a vulnerability in NVIDIA Nsight Systems for Linux where the .run installer accepts a malicious string in the installation path, enabling an OS command injection. The exploit is labeled as potentially leading to privilege escalation, code execution, data tampering, ...

7.3CVSS5.8AI score0.00027EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/20 5:55 p.m.2 views

CVE-2025-33230

NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data...

7.3CVSS5.5AI score0.00027EPSS
Exploits0References4
OSV
OSV
added 2019/04/17 6:29 p.m.0 views

CVE-2019-0158

Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score
Exploits0References2
CNVD
CNVD
added 2019/02/20 12:0 a.m.1 views

Intel OpenVINO for Linux Installer Information Disclosure Vulnerability

Intel OpenVINO for Linux is an open visual inference and neural network optimization toolkit for Linux-based platforms from Intel USA. A security vulnerability exists in the installer in IntelR OpenVINOTM 2018 R3 and earlier versions for Linux-based platforms, which stems from a logic error in th...

3.9CVSS6.3AI score0.0006EPSS
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.25 views

SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities

No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...

7.1AI score
Exploits0
CERT
CERT
added 2004/09/17 12:0 a.m.13 views

Mozilla Linux installer does not properly set file permissions

Overview Mozilla's Linux installers may not properly set file permissions on the installed program files. A local user may then be able to modify or replace these files with malicious versions. Description Some versions of Mozilla's Linux installer may create installation and program files with...

6.5AI score
Exploits0References6
Rows per page
Query Builder