Поиск уязвимостей
Количество 6
Количество 6
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in t ...
openSUSE-SU-2018:0229-1
Security update for newsbeuter
GHSA-372j-rcwj-w67h
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
ALT-PU-2017-2368
ALT-PU-2017-2368: package `newsbeuter` update to version 2.9-alt3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-14500 Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904. | CVSS3: 8.8 | 3% Низкий | около 9 лет назад |
 | CVE-2017-14500 Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904. | CVSS3: 8.8 | 3% Низкий | около 9 лет назад |
| CVE-2017-14500 Improper Neutralization of Special Elements used in an OS Command in t ... | CVSS3: 8.8 | 3% Низкий | около 9 лет назад |
 | openSUSE-SU-2018:0229-1 Security update for newsbeuter | 3% Низкий | почти 9 лет назад | |
| GHSA-372j-rcwj-w67h Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904. | CVSS3: 8.8 | 3% Низкий | больше 4 лет назад |
| ALT-PU-2017-2368 ALT-PU-2017-2368: package `newsbeuter` update to version 2.9-alt3 | CVSS3: 8.8 | около 9 лет назад |
Уязвимостей на страницу