Lucene search
+L

5 matches found

OSV
OSV
added 2018/11/06 11:13 p.m.34 views

GHSA-2JC8-4R6G-282J python-gnupg's shell_quote function does not properly escape characters

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

8.7CVSS7.1AI score0.0061EPSS
SaveExploits2References8
NVD
NVD
added 2014/10/25 9:55 p.m.21 views

CVE-2014-1928

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

4.6CVSS7.3AI score0.0061EPSS
SaveExploits2References7
Prion
Prion
added 2014/10/25 9:55 p.m.27 views

Design/Logic Flaw

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

4.6CVSS7.6AI score0.03417EPSS
SaveExploits5References7Affected Software1
Debian CVE
Debian CVE
added 2014/10/25 9:0 p.m.64 views

CVE-2014-1928

The shellquote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" backslash characters to form multi-command sequences, a different...

4.6CVSS7.3AI score0.0061EPSS
SaveExploits2
Debian CVE
Debian CVE
added 2014/10/25 9:0 p.m.80 views

CVE-2014-1927

The shellquote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$" command-substitution sequences, a different vulnerability than CVE-2014-1928...

7.5CVSS7.3AI score0.03417EPSS
SaveExploits2
Rows per page
Query Builder