Lucene search
K

15 matches found

EUVD
EUVD
added 2026/04/08 6:3 p.m.2 views

EUVD-2026-20540

Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit...

7.8CVSS5.9AI score0.00008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 5:40 p.m.1 views

CVE-2026-27806 Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit

Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command"expect", "-c", script. Because the...

7.8CVSS6AI score0.00008EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-25926

Malicious code in bioql PyPI...

7.2CVSS6.1AI score0.0006EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.1 views

NewStart CGSL MAIN 6.06 : tcl Vulnerability (NS-SA-2025-0225)

The remote NewStart CGSL host, running version MAIN 6.06, has tcl packages installed that are affected by a vulnerability: - The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows...

4CVSS7.5AI score0.00278EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.1 views

SUSE CVE-2006-4154

Format string vulnerability in the modtcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a setvar function call in 1 tclcmds.c and 2 tclcore.c...

6.8CVSS7.9AI score0.32788EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.0 views

SUSE CVE-2007-4769

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service backend crash via an out-of-bounds backref number...

6.8CVSS6.8AI score0.01194EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.1 views

SUSE CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service memory consumption via a crafted "complex...

6.8CVSS6.5AI score0.00533EPSS
Exploits1References4
OSV
OSV
added 2022/06/24 11:3 a.m.1 views

OESA-2022-1720 tcl security update

TclTool Command Language provides a powerful platform for creating integration applications that tie together diverse applications, protocols, devices, and frameworks. When paired with the Tk toolkit, Tcl provides the fastest and most powerful way to create GUI applications that run on linux, Uni...

7.8CVSS7.8AI score0.00344EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.1 views

Apple macOS Big Sur 安全特征问题漏洞

Apple macOS Big Sur is the 17th major release of Apple's macOS Big Sur, Apple's operating system for the MAC, macOS. Apple macOS Big Sur versions 12.0 21A344 through 12.3.1 21E258 suffer from a security signature issue vulnerability that originates in the system Tcl component. An attacker can...

6.3CVSS7AI score0.00283EPSS
Exploits0References9
OSV
OSV
added 2022/04/15 3:15 p.m.0 views

CVE-2022-20676

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

6.7CVSS6.4AI score
Exploits0References1
CNVD
CNVD
added 2020/06/04 12:0 a.m.3 views

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-31828)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the Tool Command Language Tcl parser in Cisco IOS and IOS XE, which stems from a lack of validation of input data. An attacker could exploit this...

7.2CVSS7.6AI score0.00063EPSS
Exploits0
CNVD
CNVD
added 2020/06/04 12:0 a.m.1 views

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-31827)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the Tool Command Language Tcl parser in Cisco IOS Software and Cisco IOS XE Software, which stems from a lack of validation of input data. An attacker...

6CVSS6.8AI score0.00033EPSS
Exploits0
OpenVAS
OpenVAS
added 2013/01/21 12:0 a.m.31 views

CentOS Update for tcl CESA-2013:0122 centos5

Check for the Version of tcl OpenVAS Vulnerability Test CentOS Update for tcl CESA-2013:0122 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

6.8CVSS8.9AI score0.00533EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2013/01/11 12:0 a.m.29 views

RedHat Update for tcl RHSA-2013:0122-01

Check for the Version of tcl OpenVAS Vulnerability Test RedHat Update for tcl RHSA-2013:0122-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

6.8CVSS8.9AI score0.00533EPSS
Exploits2References2
Cent OS
Cent OS
added 2013/01/09 8:44 p.m.78 views

tcl security update

CentOS Errata and Security Advisory CESA-2013:0122 Updated tcl packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

6.8CVSS7.2AI score0.00533EPSS
Exploits2References7
Rows per page
Query Builder