Most recent entries from all

CVE-2024-32487

2026-09-30T04:42:35.713471+00:00

Affected: netapp less

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

USN-6756-1 — less vulnerability

2026-09-30T04:42:35.713542+00:00

Affected: Ubuntu:Pro:14.04:LTS: less, Ubuntu:Pro:16.04:LTS: less, Ubuntu:Pro:18.04:LTS: less, Ubuntu:20.04:LTS: less, Ubuntu:22.04:LTS: less, Ubuntu:24.04:LTS: less

It was discovered that less mishandled newline characters in file names. If a user or automated system were tricked into opening specially crafted files, an attacker could possibly use this issue to execute arbitrary commands on the host.