Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2018/09/13 3:47 p.m.•42 views

Topydo Improper Input Validation vulnerability

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.1CVSS8.3AI score0.01165EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2018/09/13 3:47 p.m.•100 views

GHSA-H6H9-PPHV-M266 Topydo Improper Input Validation vulnerability

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.3CVSS8.1AI score0.01165EPSS
SaveExploits0References6
Veracode
Veracode
•added 2018/06/27 6:49 a.m.•21 views

Arbitrary Command Execution

topydo is vulnerable to arbitrary command execution attacks. The library does not sanitize any of the TODO texts that are passed to the command line, allowing a malicious user to pass arbitrary bytes to the command line by prepending the bytes with the \ character...

8.1CVSS8.1AI score0.01165EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/06/26 4:29 p.m.•12 views

CVE-2018-1000523

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.1CVSS5.9AI score0.01165EPSS
SaveExploits0References2
PyPA
PyPA
•added 2018/06/26 4:29 p.m.•17 views

PYSEC-2018-76

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.1CVSS7.4AI score0.01165EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2018/06/26 4:29 p.m.•17 views

Input validation

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

5.8CVSS8.2AI score0.01165EPSS
SaveExploits0References2
OSV
OSV
•added 2018/06/26 4:29 p.m.•30 views

PYSEC-2018-76

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.1CVSS4.3AI score0.01165EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/06/26 4:00 p.m.•39 views

CVE-2018-1000523

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.2AI score0.01165EPSS
SaveExploits0References2
Mend
Mend
•added 2018/06/26 4:00 p.m.•2 views

CVE-2018-1000523

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.1CVSS0.01165EPSS
SaveExploits0References6
CVE
CVE
•added 2018/06/26 4:00 p.m.•88 views

CVE-2018-1000523

This CVE affects the topydo project. The vulnerability resides in ListFormatParser::parse (topydo/lib/ListFormat.py:292) and is caused by improper input validation (CWE-20). It can lead to injection of arbitrary bytes into the terminal, including terminal escape code sequences, exploitable when a...

8.1CVSS7.5AI score0.01165EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2018/06/26 12:00 a.m.•2 views

PT-2018-9420

Name of the Vulnerable Software and Affected Versions topydo affected versions not specified Description The issue is related to improper input validation in the ListFormatParser::parse function, located in the topydo/lib/ListFormat.py file. This can lead to the injection of arbitrary bytes to th...

8.3CVSS0.01165EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/26 12:00 a.m.•5 views

CVE-2018-1000523: Improper Input Validation

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attac...

8.1CVSS7.5AI score0.01165EPSS
SaveExploits0References2
Rows per page
Query Builder