Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-0532

Malware in sbrugna...

7.5CVSS6.3AI score0.00636EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/21 8:59 p.m.2 views

CVE-2003-0538

The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program...

7.5CVSS7.7AI score0.00636EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.1 views

SUSE CVE-2006-7234

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious 1 .mailcap and 2 mime.types files in the current working directory...

4.6CVSS7.6AI score0.0014EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/11/08 9:30 a.m.1 views

python: mailcap: findmatch() function does not sanitize the second argument

A command injection vulnerability was found in the Python mailcap module. The issue occurs due to not adding escape characters into the system mailcap file commands. This flaw allows attackers to inject shell commands into applications that call the mailcap.findmatch function with untrusted input...

8CVSS6.8AI score0.0087EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/10/03 3:25 p.m.3 views

python: mailcap: findmatch() function does not sanitize the second argument

A command injection vulnerability was found in the Python mailcap module. The issue occurs due to not adding escape characters into the system mailcap file commands. This flaw allows attackers to inject shell commands into applications that call the mailcap.findmatch function with untrusted input...

8CVSS6.8AI score0.0087EPSS
Exploits1References5
OSV
OSV
added 2022/04/13 4:15 p.m.2 views

DEBIAN-CVE-2015-20107

In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided...

7.6CVSS7.3AI score0.0087EPSS
Exploits1References1
Prion
Prion
added 2022/04/13 4:15 p.m.79 views

Input validation

In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided...

8CVSS9.4AI score0.0087EPSS
Exploits1References29Affected Software2
UbuntuCve
UbuntuCve
added 2022/04/13 4:15 p.m.47 views

CVE-2015-20107

In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided...

8CVSS6.8AI score0.0087EPSS
Exploits1References8
AlpineLinux
AlpineLinux
added 2022/04/13 12:0 a.m.57 views

CVE-2015-20107

In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided...

8CVSS8.1AI score0.0087EPSS
Exploits1
CNNVD
CNNVD
added 2022/04/13 12:0 a.m.2 views

Python 命令注入漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A command injection vulnerability exists in Python version 3.10.4 and earlier versions, which stems from the mailc...

8CVSS7.4AI score0.0087EPSS
Exploits1References64
Cvelist
Cvelist
added 2003/07/10 4:0 a.m.9 views

CVE-2003-0538

The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program...

7.3AI score0.00636EPSS
Exploits0References1
CVE
CVE
added 2003/07/10 4:0 a.m.55 views

CVE-2003-0538

The mailcap configuration in mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, allowing remote attackers to execute arbitrary Oz programs in a MIME-aware client. Impact is arbitrary code execution under the user running the MIME client; affected: mozart with mail...

7.5CVSS7.3AI score0.00636EPSS
Exploits0References1Affected Software1
CERT
CERT
added 2001/04/13 12:0 a.m.16 views

SGI systems may execute commands embedded in mail messages

Overview Some SGI systems produced circa 1998 allowed an intruder to send mail that would execute commands when the reader opened the message. Description On some SGI systems, Netscape is bundled with IRIX 6.3 and 6.4 and is used as the default web browser and mail reader. On these systems, the...

7.7AI score
Exploits0References1
Rows per page
Query Builder