Lucene search
K

5 matches found

OSV
OSV
added 2018/11/06 11:13 p.m.24 views

GHSA-2JC8-4R6G-282J python-gnupg's shell_quote function does not properly escape characters

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

8.7CVSS7.1AI score0.00205EPSS
Exploits2References8
NVD
NVD
added 2014/10/25 9:55 p.m.16 views

CVE-2014-1928

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

4.6CVSS7.3AI score0.00205EPSS
Exploits2References7
Prion
Prion
added 2014/10/25 9:55 p.m.24 views

Design/Logic Flaw

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

4.6CVSS7.6AI score0.01162EPSS
Exploits5References7Affected Software1
Debian CVE
Debian CVE
added 2014/10/25 9:0 p.m.22 views

CVE-2014-1928

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

4.6CVSS7.3AI score0.00205EPSS
Exploits2
Debian CVE
Debian CVE
added 2014/10/25 9:0 p.m.26 views

CVE-2014-1927

The shellquote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$" command-substitution sequences, a different vulnerability than CVE-2014-1928...

7.5CVSS7.3AI score0.00727EPSS
Exploits2
Rows per page
Query Builder