Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-112263

Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format_command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the default edit action executes commands with victim privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Alexpasmantier
Products
Television
CVE-2026-111876

alexpasmantier television entry.rs output command injection

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub issue was closed with the label "not planned".

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Alexpasmantier
Products
Television