dbcve.org
Vulnerability index

Browse CVEs

36 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness OS Command InjectionCWE-78 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Debian Linux HIGH 8.8
CVE-2017-16921EPSS 20%

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged …

Patch available
Fix from $1,950 2017-12-08
Debian Linux CRITICAL 9.8
CVE-2017-17458EPSS 6%

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a …

Fix: 4.4.1+
Fix from $2,300 2017-12-07
Most CRITICAL 9.8
CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote …

Fix: 5.0.0a-2.2 / 5.0.0a-2.3+
Fix from $2,300 2017-12-05
Debian Linux HIGH 7.8
CVE-2017-15924

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration req…

Patch available
Fix from $1,950 2017-10-27
Debian Linux CRITICAL 9.8
CVE-2017-1000116EPSS 6%

Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

Fix: 4.3+
Fix from $2,300 2017-10-05
Debian Linux HIGH 10.0
CVE-2008-4796EPSS 9%

The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamat…

Fix: 2.6.3 / 4.2.2+
Fix from $1,950 2008-10-30