4128 matches found
PT-2023-11904 · Unknown · Tinyfiledialogs
Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.8.0 Description: The issue allows shell metacharacters in titles, messages, and other input data. Recommendations: For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...
CVE-2020-36767
The CVE-2020-36767 entry concerns tinyfiledialogs (tiny file dialogs). The connected sources confirm that versions before 3.8.0 were vulnerable to shell metacharacters in input fields such as titles and messages, due to an incomplete fix. Affected software is the tinyfiledialogs library (C/C++ he...
tinyfiledialogs-rs Security Vulnerabilities
tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability exists in tinyfiledialogs-rs prior to version 3.8.0 that stems from allowing shell metacharacters to be used in headers, messages, and other input data, leading to code execution...
CVE-2020-36767
tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
tinyfiledialogs-rs Security Vulnerabilities
tinyfiledialogs-rs is a tinyfiledialog library highly bound to Rust. A security vulnerability in tinyfiledialogs-rs prior to version 3.8.0, which stems from an incomplete fix in CVE-2020-36767, allows the use of shell metacharacters in headers, messages, and other input data, leading to code...
CVE-2023-47104
CVE-2023-47104 affects the tinyfiledialogs library (tiny file dialogs). It allows shell metacharacters (e.g., backquote, dollar sign) in user-visible input like titles and messages due to an incomplete fix of CVE-2020-36767. Affected versions are before 3.15.0. The issue's root cause is improper ...
PT-2023-30311 · Unknown · Tinyfiledialogs
Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.15.0 Description: The issue allows shell metacharacters, such as a backquote or a dollar sign, in titles, messages, and other input data. This problem exists due to an incomplete fix for a previous issue,...
CVE-2023-47104
tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
CVE-2023-46321
CVE-2023-46321 affects iTerm2, specifically the iTermSessionLauncher.m component, where paths in x-man-page URLs are not sanitized. This allows shell metacharacters to reach a /usr/bin/man command line, enabling a potentially dangerous injection path as described in multiple sources. The NVD entr...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
PT-2023-29958 · Iterm2 · Iterm2
Name of the Vulnerable Software and Affected Versions: iTerm2 versions prior to 3.5.0beta12 Description: The issue is related to the iTermSessionLauncher.m component in iTerm2, which does not properly sanitize paths in x-man-page URLs. This can lead to the inclusion of shell metacharacters in a...
CVE-2023-46321
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line...
CVE-2023-45852
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method...
Authentication flaw
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method...
CVE-2023-45852
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method...
VulnCheck KEV: CVE-2021-36380
Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi...