Lucene search
+L

840 matches found

OSV
OSV
added 2024/05/19 4:15 p.m.5 views

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

9CVSS5.8AI score0.01049EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/19 4:15 p.m.19 views

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

9CVSS7AI score0.01049EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/19 3:16 p.m.18 views

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

7.4AI score0.01049EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/05/19 3:16 p.m.35 views

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

7AI score0.01049EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/19 3:16 p.m.103 views

CVE-2024-36053

CVE-2024-36053 affects the Linux Mint mintupload package up to version 4.2.0, where a service-name mishandling allows command injection via shell metacharacters in functions check_connection, drop_data_received_cb, and Service.remove. An attacker can modify a service name in ~/.linuxmint/mintUplo...

9CVSS7.2AI score0.01049EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/19 12:0 a.m.7 views

mintupload 安全漏洞

mintupload is an open source library for Linux Mint. A security vulnerability exists in mintupload version 4.2.0 and earlier, which stems from mishandling of service names, which allows a user to modify the name of a service in a file...

9CVSS6.6AI score0.01049EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/05/19 12:0 a.m.37 views

CVE-2024-36053

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell metacharacters in checkconnection, dropdatareceivedcb, and Service.remove. A user can modify a service name in a /.linuxmint/mintUpload/services/service file...

7.5AI score0.01049EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/05/19 12:0 a.m.11 views

PT-2024-26866 · Linux Mint · Mintupload

Name of the Vulnerable Software and Affected Versions: mintupload versions through 4.2.0 Description: The issue is related to service-name mishandling, which leads to command injection via shell metacharacters in functions such as check connection, drop data received cb, and Service.remove. A use...

9CVSS7.2AI score0.01049EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.37 views

CVE-2023-44451

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS6.2AI score0.0177EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.6 views

CVE-2023-44452

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS6.3AI score0.01274EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/05/03 3:16 a.m.25 views

CVE-2023-44451

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS8AI score0.0177EPSS
SaveExploits1References2
NVD
NVD
added 2024/05/03 3:16 a.m.39 views

CVE-2023-44452

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS8.1AI score0.01274EPSS
SaveExploits1References2
OSV
OSV
added 2024/05/03 3:16 a.m.7 views

UBUNTU-CVE-2023-44452

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visi...

7.5AI score
SaveExploits0References4
OSV
OSV
added 2024/05/03 2:14 a.m.26 views

CVE-2023-44452 Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.6AI score
SaveExploits0References4
CVE
CVE
added 2024/05/03 2:14 a.m.110 views

CVE-2023-44452

CVE-2023-44452 affects Linux Mint Xreader (and related Atril/Xreader components) via CBT file parsing. The root cause is insufficient validation when handling user-supplied strings used in system calls during CBT extraction, enabling arbitrary code execution in the context of the current user aft...

7.8CVSS8.1AI score0.01274EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.17 views

CVE-2023-44452 Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.7AI score0.01274EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.38 views

CVE-2023-44452 Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS8.3AI score0.01274EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.38 views

CVE-2023-44451 Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS8.2AI score0.0177EPSS
SaveExploits1References2
OSV
OSV
added 2024/05/03 2:14 a.m.23 views

CVE-2023-44451 Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.20 views

CVE-2023-44451 Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.4AI score0.0177EPSS
SaveExploits1References2
Rows per page
Query Builder