https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:02:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02642 bdu:2020-02642 https://cve.radiocsirt.org/vuln/bdu:2020-02642 https://cve.radiocsirt.org/vuln/bell-cve-2019-14889 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-14889 https://cve.radiocsirt.org/vuln/certfr-2020-avi-218 certfr-2020-avi-218 https://cve.radiocsirt.org/vuln/certfr-2020-avi-218 https://cve.radiocsirt.org/vuln/euvd-2026-56689 EUVD-2026-56689 https://cve.radiocsirt.org/vuln/euvd-2026-56689 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14889 <p>A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.</p> <p>A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14889 https://cve.radiocsirt.org/vuln/ghsa-mrxf-x73j-79wm <p>A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.</p> <p>A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.</p> https://cve.radiocsirt.org/vuln/ghsa-mrxf-x73j-79wm https://cve.radiocsirt.org/vuln/gsd-2019-14889 gsd-2019-14889 https://cve.radiocsirt.org/vuln/gsd-2019-14889 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2689-1 <p>Security update for libssh</p> <p>Security update for libssh</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2689-1 https://cve.radiocsirt.org/vuln/suse-su-2019:3267-1 <p>Security update for libssh</p> <p>Security update for libssh</p> https://cve.radiocsirt.org/vuln/suse-su-2019:3267-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14889 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libssh, Ubuntu:18.04:LTS: libssh</p> <p>A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libssh, Ubuntu:18.04:LTS: libssh</p> <p>A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14889 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1049 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1049