CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 11 Last 7 days 2,779 Total CVEs 401,141 CISA KEV 1,731 Critical 42,394 All stats

Filters: Vendor: Fishshell Clear all

Page 1

CVE-2023-49284 MEDIUM

Command substitution output can trigger shell expansion in fish shell

CVSS 6.6 EPSS 0.47% Dec 4, 2023

CVE-2022-20001 HIGH

Injection in fish

CVSS 7.8 EPSS 1.48% Mar 14, 2022

CVE-2014-2906 HIGH

The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands…

CVSS 7.0 EPSS 0.31% Jan 28, 2020

CVE-2014-3856 HIGH

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a te…

CVSS 7.0 EPSS 0.29% Jan 28, 2020

CVE-2014-2914 CRITICAL

fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbi…

CVSS 9.8 EPSS 3.19% Jan 28, 2020

CVE-2014-3219 HIGH

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.…

CVSS 7.8 EPSS 0.43% Feb 9, 2018

CVE-2014-2905 MEDIUM

fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socke…

CVSS 6.9 EPSS 0.35% May 2, 2014

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2023-49284	Command substitution output can trigger shell expansion in fish shell	MEDIUM	6.6	0.47%	Dec 4, 2023
CVE-2022-20001	Injection in fish	HIGH	7.8	1.48%	Mar 14, 2022
CVE-2014-2906	The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands…	HIGH	7.0	0.31%	Jan 28, 2020
CVE-2014-3856	The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a te…	HIGH	7.0	0.29%	Jan 28, 2020
CVE-2014-2914	fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbi…	CRITICAL	9.8	3.19%	Jan 28, 2020
CVE-2014-3219	fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.…	HIGH	7.8	0.43%	Feb 9, 2018
CVE-2014-2905	fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socke…	MEDIUM	6.9	0.35%	May 2, 2014

Rows per page

Showing 1 to 7 CVEs · page 1