Skip to content
OpenAdvisories

Archive

2 May 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters

    lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.

  • High 7.5

    Transifex command-line client has improper certificate validation

    Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an inco…