Metview Parameter Injection Vulnerability

Metview is an open source weather analysis application. The program is capable of acquiring data from multiple sources and performing meteorological analysis. A security vulnerability exists in Metview version 4.7.3 in etc/ObjectList, which originates from the program failing to validate strings...

xTuple PostBooks Parameter Injection Vulnerability

xTuple PostBooks is a full-featured business management system that runs only in the cloud or in a local server. The system includes features such as sales management, purchasing management, and inventory and distribution management. A security vulnerability exists in the guiclient/guiclient.cpp...

OCaml Batteries Included Parameter Injection Vulnerability

OCaml Batteries Included a.k.a. ocaml-batteries is a set of development platforms based on the OCaml language maintained by the OCaml community. A security vulnerability exists in the batteriesConfig.mlp file in OCaml Batteries Included version 2.6, which stems from the program failing to validat...

TeX Live Parameter Injection Vulnerability

TeX Live is an international TeX user organization TUG developed a set of TeX electronic typesetting system. The system provides typesetting language, macro definition and other functions. A security vulnerability exists in TeX Live 20170524 and earlier versions, which stems from the program...

White_dune Parameter Injection Vulnerability

Whitedune aka whitedune is an open source editor and viewer for VRML97 files. A security vulnerability exists in the swt/motif/browser.c file in Whitedune version 0.30.10, which stems from the program failing to validate strings before launching the program. A remote attacker can exploit the...

Command injection

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the openvpnServer0tmp= parameter in the...

LilyPond Parameter Injection Vulnerability

LilyPond is a set of open source audio editing software. lilypond-invoke-editor is one of the tools used to invoke the editor. A security vulnerability exists in lilypond-invoke-editor in LilyPond version 2.19.80, which stems from the program failing to validate strings before launching a program...

CVE-2017-2601

Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions SECURITY-353. Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions...

CVE-2017-2601

The connected materials corroborate CVE-2017-2601 as a persisted cross-site scripting (XSS) vulnerability in Jenkins parameter names and descriptions, exploitable by attackers with Job/Configure permission. Jenkins core fixes the issue (SECURITY-353) by hardening the Build With Parameters/Paramet...

DEBIAN-CVE-2017-0372

Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities...

UBUNTU-CVE-2017-0372

Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities...

PasDoc Parameter Injection Vulnerability

PasDoc is a set of open source Pascal and Object Pascal source code documentation generation tools . A security vulnerability exists in the delphigui/WWWBrowserRunnerDM.pas file in PasDoc version 0.14, which originates from the program not validating strings before starting the program. A remote...

Geomview Parameter Injection Vulnerability

Geomview is an interactive 3D graphics viewing program for Unix-like systems. The program supports the use of the mouse to rotate, zoom in or out of graphics, and more. A security vulnerability exists in the common/help.c file in Geomview version 1.9.5, which originates from the program not...

Bernard Parisse Giac Parameter Injection Vulnerability

Bernard Parisse Giac is an open source computer algebra system written in C++ for Windows, Mac OS X, Unix and Linux. A security vulnerability exists in the Input.cc file in Bernard Parisse Giac version 1.2.3.57, which originates from the program failing to validate strings before starting the...

ScummVM Parameter Injection Vulnerability

ScummVM is a graphics engine for point-and-click adventure games. A security vulnerability exists in the backends/platform/sdl/posix/posix.cpp file in ScummVM version 1.9.0, which originates from a program that does not validate strings before starting the program. A remote attacker could exploit...

AbiWord Parameter Injection Vulnerability

AbiWord is a free word processing program similar to Microsoft Word for a variety of word processing tasks. A security vulnerability exists in the af/util/xp/utgofile.cpp file in AbiWord version 3.0.2-2, which originates from the program not validating strings before starting the program. A remot...

SWI-Prolog library/www_browser.pl file injection vulnerability

SWI-Prolog is a fee-compliant compiler for the Prolog language. A security vulnerability exists in the library/wwwbrowser.pl file in SWI-Prolog version 7.2.3, which stems from the program failing to validate strings before starting the program. A remote attacker can exploit the vulnerability to...

KildClient Parameter Injection Vulnerability

KildClient is a MUD client written in GTK+ Window Toolkit. A parameter injection vulnerability exists in KildClient 3.1.0. The vulnerability arises because KildClient does not validate strings before starting a program specified by the BROWSER environment variable. A remote attacker can exploit...

Sylpheed libsylph/utils.c File Injection Vulnerability

Sylpheed is a lightweight email client using GTK+ Graphical Interface Creation Kit. A security vulnerability exists in the libsylph/utils.c file in Sylpheed 3.6 and earlier versions, which stems from the program failing to validate strings before starting the program. A remote attacker can exploi...

nip2 Parameter Injection Vulnerability

nip2 is a GUI for the VIPS image processing library. A parameter injection vulnerability exists in nip2 8.4.0. The vulnerability arises because boxes.c in nip2 does not validate strings before starting a program specified by the BROWSER environment variable. A remote attacker could exploit this...