Archive
2 May 2014
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
High —
Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters
lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.
-
High 7.5
Transifex command-line client has improper certificate validation
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an inco…