https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:18:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03363 bdu:2021-03363 https://cve.radiocsirt.org/vuln/bdu:2021-03363 https://cve.radiocsirt.org/vuln/bell-cve-2017-16544 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-16544 https://cve.radiocsirt.org/vuln/certfr-2019-avi-446 certfr-2019-avi-446 https://cve.radiocsirt.org/vuln/certfr-2019-avi-446 https://cve.radiocsirt.org/vuln/cnvd-2017-37820 cnvd-2017-37820 https://cve.radiocsirt.org/vuln/cnvd-2017-37820 https://cve.radiocsirt.org/vuln/euvd-2026-243485 EUVD-2026-243485 https://cve.radiocsirt.org/vuln/euvd-2026-243485 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16544 <p>In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.</p> <p>In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16544 https://cve.radiocsirt.org/vuln/ghsa-234c-568r-p7m4 <p>In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.</p> <p>In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-234c-568r-p7m4 https://cve.radiocsirt.org/vuln/gsd-2017-16544 gsd-2017-16544 https://cve.radiocsirt.org/vuln/gsd-2017-16544 https://cve.radiocsirt.org/vuln/icsa-20-240-01 <p>The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user.CVE-2020-16210 has been assigned to this vulnerability. A CVSS v3 base score of 9.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data.CVE-2020-16206 has been assigned to this vulnerability. A CVSS v3 base score of 9.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link.CVE-2020-16208 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device.CVE-2020-16204 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product is vulnerable due to outdated software components, which may allow an attacker to gain a…</p> <p>The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user.CVE-2020-16210 has been assigned to this vulnerability. A CVSS v3 base score of 9.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data.CVE-2020-16206 has been assigned to this vulnerability. A CVSS v3 base score of 9.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link.CVE-2020-16208 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device.CVE-2020-16204 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product is vulnerable due to outdated software components, which may allow an attacker to gain a…</p> https://cve.radiocsirt.org/vuln/icsa-20-240-01 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0135-1 <p>Security update for busybox</p> <p>Security update for busybox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0135-1 https://cve.radiocsirt.org/vuln/suse-su-2022:0135-1 <p>Security update for busybox</p> <p>Security update for busybox</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0135-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16544 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: busybox, Ubuntu:16.04:LTS: busybox, Ubuntu:18.04:LTS: busybox</p> <p>In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: busybox, Ubuntu:16.04:LTS: busybox, Ubuntu:18.04:LTS: busybox</p> <p>In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16544 https://cve.radiocsirt.org/vuln/vde-2019-013 <p>Multiple vulnerabilities have been identified in WAGO 852-303, 852-1305 and 852-1505 industrial managed ethernet switches.</p> <p>Multiple vulnerabilities have been identified in WAGO 852-303, 852-1305 and 852-1505 industrial managed ethernet switches.</p> https://cve.radiocsirt.org/vuln/vde-2019-013 https://cve.radiocsirt.org/vuln/vde-2020-003 <p>Multiple Vulnerabilities exist in components used by the aforementioned products. See CVE-Details for more information.</p> <p>Multiple Vulnerabilities exist in components used by the aforementioned products. See CVE-Details for more information.</p> https://cve.radiocsirt.org/vuln/vde-2020-003