Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cvs vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2019-4521
Platform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 165179.
Ibm Cloud Pak System 2.3
Ibm Cloud Pak System 2.3.0.1
9.8
CVSSv3
CVE-2008-0599
The init_request_info function in sapi/cgi/cgi_main.c in PHP prior to 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote malicious users to execute arbitrary code via a crafted URI.
Php Php
Fedoraproject Fedora 9
Fedoraproject Fedora 8
Canonical Ubuntu Linux 7.04
Canonical Ubuntu Linux 7.10
Canonical Ubuntu Linux 8.04
Canonical Ubuntu Linux 6.06
Apple Mac Os X Server
Apple Mac Os X
9
CVSSv3
CVE-2020-4627
IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367.
Ibm Cloud Pak For Security 1.3.0.1
8.8
CVSSv3
CVE-2021-43806
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated ma...
Enalean Tuleap
8.8
CVSSv3
CVE-2021-41155
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not sanitize properly user inputs when constructing the SQL query to browse and search revisions in the CVS repositories. The following vers...
Enalean Tuleap
8.8
CVSSv3
CVE-2015-9402
The users-ultra plugin prior to 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
Usersultra Users Ultra Membership
8.8
CVSSv3
CVE-2017-14867
Git prior to 2.10.5, 2.11.x prior to 2.11.4, 2.12.x prior to 2.12.5, 2.13.x prior to 2.13.6, and 2.14.x prior to 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows malicious users to execute arbitrary OS commands via shell metacharacters in a m...
Git-scm Git 2.11.0
Git-scm Git 2.11.1
Git-scm Git 2.11.2
Git-scm Git 2.11.3
Git-scm Git 2.12.0
Git-scm Git 2.12.1
Git-scm Git 2.12.2
Git-scm Git 2.12.3
Git-scm Git 2.12.4
Git-scm Git 2.13.0
Git-scm Git 2.13.1
Git-scm Git 2.13.2
Git-scm Git 2.13.3
Git-scm Git 2.13.4
Git-scm Git 2.13.5
Git-scm Git 2.14.0
Git-scm Git 2.14.1
Git-scm Git
Debian Debian Linux 8.0
Debian Debian Linux 9.0
7.8
CVSSv3
CVE-2020-4759
IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736.
Ibm Filenet Content Manager 5.5.4
Ibm Filenet Content Manager 5.5.5
7.8
CVSSv3
CVE-2018-6461
March Hare WINCVS prior to 2.8.01 build 6610, and CVS Suite prior to 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the curren...
March-hare Wincvs
7.8
CVSSv3
CVE-2002-0844
Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD prior to 1.11.2 allows local users to execute arbitrary code.
Distrotech Cvs
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »