Lucene search
+L

36 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•3 views

CVE-2024-44844: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the runcommand function...

8.8CVSS5.9AI score0.01902EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/24 12:00 a.m.•2 views

CVE-2021-4041: Improper Input Validation

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.2AI score0.00328EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2022/01/11 8:57 p.m.•15 views

Ansible: Improper shell escaping in ansible-runner

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.4AI score0.00328EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2019/12/03 12:00 a.m.•37 views

EulerOS Virtualization for ARM 64 3.0.3.0 : git (EulerOS-SA-2019-2310)

According to the version of the git packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH ...

9.8CVSS6.8AI score0.0412EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/06/21 1:07 a.m.•57 views

Updated git packages fix security vulnerability

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017 CVE-2018-19486...

9.8CVSS2.1AI score0.0412EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/12/20 12:00 a.m.•47 views

Amazon Linux 2 : git (ALAS-2018-1136)

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017.CVE-2018-19486 C Tenable Network...

9.8CVSS7AI score0.0412EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/11/26 4:49 a.m.•40 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS2.1AI score0.0412EPSS
SaveExploits0References2
OSV
OSV
•added 2018/11/23 8:29 a.m.•39 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS6.7AI score
SaveExploits0References7
Prion
Prion
•added 2018/11/23 8:29 a.m.•29 views

Design/Logic Flaw

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

7.5CVSS9.2AI score0.0412EPSS
SaveExploits0References7Affected Software2
NVD
NVD
•added 2018/11/23 8:29 a.m.•34 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS9.5AI score0.0412EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2018/11/23 8:00 a.m.•33 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.4AI score0.0412EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2018/11/23 8:00 a.m.•48 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS6.9AI score0.0412EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2018/11/23 8:00 a.m.•58 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS9.5AI score0.0412EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/23 12:00 a.m.•4 views

CVE-2018-19486: Untrusted Search Path

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS6.9AI score0.0412EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2018/11/23 12:00 a.m.•48 views

CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS6.8AI score0.0412EPSS
SaveExploits0References3
OSV
OSV
•added 2018/11/23 12:00 a.m.•12 views

UBUNTU-CVE-2018-19486

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was a dangerous change from execvp to execv during 2017...

9.8CVSS6.7AI score0.0412EPSS
SaveExploits0References4
Rows per page
Query Builder