Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-2118

Malicious code in bioql PyPI...

9.3CVSS9.1AI score0.16412EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•19 views

RHEL 4 : audit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Audit: log terminal emulator escape sequences handling CVE-2015-5186 Note that Nessus has not tested for this issue...

5.3CVSS5.3AI score0.02755EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/14 2:03 a.m.•96 views

GHSA-369M-2GV6-MW28 WEBrick RCE Vulnerability

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name...

8.8CVSS9.6AI score0.16412EPSS
SaveExploits0References21
OSV
OSV
•added 2017/09/19 5:29 p.m.•40 views

CVE-2017-10784

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name...

8.8CVSS9.6AI score
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/19 12:00 a.m.•7 views

CVE-2017-10784: Improper Authentication

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name...

9.3CVSS7.5AI score0.16412EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/07/01 12:00 a.m.•6 views

PT-2017-2997

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.2.8 Ruby versions 2.3.x prior to 2.3.5 Ruby versions 2.4.x through 2.4.1 Description The issue is related to the Basic authentication code in the WEBrick library in Ruby, which allows remote attackers to inject termina...

9.8CVSS0.16412EPSS
SaveExploits1References151
UbuntuCve
UbuntuCve
•added 2012/08/26 9:55 p.m.•41 views

CVE-2012-2104

cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request...

6.8CVSS7.3AI score0.05084EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2012/08/26 12:00 a.m.•34 views

PT-2012-3810

Name of the Vulnerable Software and Affected Versions Munin versions 2.x Description The issue allows user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request to the "cgi-bin/munin-cgi-graph"...

6.8CVSS0.05084EPSS
SaveExploits2References11
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•41 views

PuTTY window title escape character arbitrary command execution

PuTTY is a free SSH client. This version contains a flaw that may allow a malicious user to insert arbitrary commands and execute them. The issue is triggered when an attacker sends commands, preceded by terminal emulator escape sequences. It is possible that the flaw may allow arbitrary code...

7.5CVSS0.2AI score0.02198EPSS
SaveExploits0
Rows per page
Query Builder