Search CVE reports
1 – 3 of 3 results
CVE-2017-14500
Medium priorityImproper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item...
1 affected package
newsbeuter
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
newsbeuter | — | — | Not in release | Not affected | Fixed |
CVE-2017-12904
Medium priorityImproper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes...
1 affected package
newsbeuter
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
newsbeuter | — | — | Not in release | Not affected | Fixed |
CVE-2008-3907
Medium prioritySome fixes available 2 of 3
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.
1 affected package
newsbeuter
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
newsbeuter | — | — | — | — | — |