{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-23T22:58:55.121","vulnerabilities":[{"cve":{"id":"CVE-2014-0156","sourceIdentifier":"secalert@redhat.com","published":"2022-06-30T21:15:10.373","lastModified":"2026-06-17T00:02:24.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command."},{"lang":"es","value":"Awesome spawn contiene una vulnerabilidad de inyección de comandos en el Sistema Operativo, que permite una ejecución de comandos adicionales pasados a Awesome spawn como argumentos. Si es incluida una entrada no confiable en los argumentos de los comandos, el atacante podía usar este fallo para ejecutar un comando arbitrario"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"awesome_spawn","versions":[{"version":">1.20, >= 1.30","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageiq:awesomespawn:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.5.0","matchCriteriaId":"DA72EF0C-A701-40BB-910B-9CC4C82E2D28"}]}]}],"references":[{"url":"https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://rubysec.com/advisories/CVE-2014-0156/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://rubysec.com/advisories/CVE-2014-0156/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}