https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-10081.htmlhttps://patchthecve.com/cve/CVE-2016-10081.htmlWed, 17 Jun 2026 00:39:01 +0000HIGH 7.8: /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action.https://patchthecve.com/cve/CVE-2015-0854.htmlhttps://patchthecve.com/cve/CVE-2015-0854.htmlWed, 17 Jun 2026 00:21:02 +0000HIGH 7.8: App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action.https://patchthecve.com/cve/CVE-2014-3905.htmlhttps://patchthecve.com/cve/CVE-2014-3905.htmlWed, 17 Jun 2026 00:09:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2014-3904.htmlhttps://patchthecve.com/cve/CVE-2014-3904.htmlWed, 17 Jun 2026 00:09:06 +0000HIGH 7.5: SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.