Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 13:19:34 +0000 cnvd-2018-11123 https://cve.radiocsirt.org/vuln/cnvd-2018-11123 cnvd-2018-11123 https://cve.radiocsirt.org/vuln/cnvd-2018-11123 EUVD-2026-79604 https://cve.radiocsirt.org/vuln/euvd-2026-79604 EUVD-2026-79604 https://cve.radiocsirt.org/vuln/euvd-2026-79604 fkie_cve-2017-17515 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17515 <p>etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product</p> <p>etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-17515 GHSA-r9gq-38jp-7grq https://cve.radiocsirt.org/vuln/ghsa-r9gq-38jp-7grq <p>** DISPUTED ** etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product.</p> <p>** DISPUTED ** etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product.</p> https://cve.radiocsirt.org/vuln/ghsa-r9gq-38jp-7grq gsd-2017-17515 https://cve.radiocsirt.org/vuln/gsd-2017-17515 gsd-2017-17515 https://cve.radiocsirt.org/vuln/gsd-2017-17515