Filtered by vendor Ecmwf
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2017-17515 | 2 Debian, Ecmwf | 2 Debian Linux, Metview | 2024-11-21 | N/A |
etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product | ||||
CVE-2010-3393 | 1 Ecmwf | 1 Magics\+\+ | 2024-11-21 | N/A |
magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. |
Page 1 of 1.