Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 01:55:38 +0000 BREW-duplicity-CVE-2014-1928 — python-gnupg's shell_quote function does not properly escape characters https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2014-1928 <p><strong>Affected:</strong> Homebrew: duplicity</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> <p><strong>Affected:</strong> Homebrew: duplicity</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2014-1928 EUVD-2026-98017 https://cve.radiocsirt.org/vuln/euvd-2026-98017 EUVD-2026-98017 https://cve.radiocsirt.org/vuln/euvd-2026-98017 fkie_cve-2014-1928 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1928 <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-1928 GHSA-2jc8-4r6g-282j — python-gnupg's shell_quote function does not properly escape characters https://cve.radiocsirt.org/vuln/ghsa-2jc8-4r6g-282j <p><strong>Affected:</strong> PyPI: python-gnupg</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> <p><strong>Affected:</strong> PyPI: python-gnupg</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> https://cve.radiocsirt.org/vuln/ghsa-2jc8-4r6g-282j gsd-2014-1928 https://cve.radiocsirt.org/vuln/gsd-2014-1928 gsd-2014-1928 https://cve.radiocsirt.org/vuln/gsd-2014-1928 PYSEC-2014-91 https://cve.radiocsirt.org/vuln/pysec-2014-91 <p><strong>Affected:</strong> PyPI: python-gnupg</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> <p><strong>Affected:</strong> PyPI: python-gnupg</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> https://cve.radiocsirt.org/vuln/pysec-2014-91 Withdrawn: UBUNTU-CVE-2014-1928 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1928 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-gnupg, Ubuntu:16.04:LTS: python-gnupg</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-gnupg, Ubuntu:16.04:LTS: python-gnupg</p> <p>The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1928