Vulnerabilities (CVE)

Filtered by CWE-184
Total 243 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-7076 1 Sudo Project 1 Sudo 2026-06-17 7.2 HIGH 6.4 MEDIUM
sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.
CVE-2016-6189 1 Alinto 1 Sogo 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
CVE-2015-5946 1 Sugarcrm 1 Sugarcrm 2026-06-17 4.6 MEDIUM 7.8 HIGH
Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.