https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:57:53 +0000 https://vulnerability.circl.lu/vuln/cve-2020-35459 <p>An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call &#34;crm history&#34; (when &#34;crm&#34; is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.</p> <p>An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call &#34;crm history&#34; (when &#34;crm&#34; is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.</p> https://vulnerability.circl.lu/vuln/cve-2020-35459 https://vulnerability.circl.lu/vuln/usn-6711-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: crmsh</p> <p>Vincent Berg discovered that CRM shell incorrectly handled certain commands. An local attacker could possibly use this issue to execute arbitrary code via shell code injection to the crm history commandline.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: crmsh</p> <p>Vincent Berg discovered that CRM shell incorrectly handled certain commands. An local attacker could possibly use this issue to execute arbitrary code via shell code injection to the crm history commandline.</p> https://vulnerability.circl.lu/vuln/usn-6711-1