Approved changes feed: RSS · Atom

cpe:2.3:a:newsbeuter:newsbeuter:0.9:*:*:*:*:*:*:*

part: a version: 0.9 update: *

VendorNewsbeuter (90d9dfdb-1c13-5a95-861d-ebdbfd227e7d)
ProductNewsbeuter (aad2c029-fb79-576d-a845-cdd097d92768)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/newsbeuter purl2cpe 2026-06-01 10:15:31.771823
pkg:deb/ubuntu/newsbeuter purl2cpe 2026-06-01 10:15:31.771824
pkg:github/akrennmair/newsbeuter purl2cpe 2026-06-01 10:15:31.771826
pkg:rpm/fedora/newsbeuter purl2cpe 2026-06-01 10:15:31.771827
pkg:rpm/opensuse/newsbeuter purl2cpe 2026-06-01 10:15:31.771828

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14500 vulnerable 2026-06-08 05:08:50.056295 Details available
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
Published: 2017-09-17T05:00:00.000Z
Updated: 2024-08-05T19:27:40.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12904 vulnerable 2026-06-08 05:08:48.019216 Details available
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.
Published: 2017-08-23T14:00:00.000Z
Updated: 2024-08-05T18:51:07.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3907 vulnerable 2026-06-08 04:50:37.156797 Details available
The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL.
Published: 2008-09-04T17:00:00.000Z
Updated: 2024-08-07T09:53:00.493Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.