Lucene search
+L

5933 matches found

OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•32 views

SUSE: Security Advisory (SUSE-SU-2016:0290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS8.4AI score0.0218EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2021:1455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS6.5AI score0.00666EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•15 views

SUSE: Security Advisory (SUSE-SU-2020:2729-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS6.5AI score0.00652EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•39 views

SUSE: Security Advisory (SUSE-SU-2018:0386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.0245EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/02 5:15 p.m.•21 views

Design/Logic Flaw

The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...

6.8CVSS7.7AI score0.03214EPSS
SaveExploits0References6Affected Software2
UbuntuCve
UbuntuCve
•added 2021/06/02 5:15 p.m.•25 views

CVE-2015-1877

The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...

8.8CVSS7.5AI score0.03214EPSS
SaveExploits0References1
Mend
Mend
•added 2021/06/02 4:34 p.m.•4 views

CVE-2015-1877

The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...

8.8CVSS0.03214EPSS
SaveExploits0References7
CVE
CVE
•added 2021/06/02 4:34 p.m.•111 views

CVE-2015-1877

CVE-2015-1877 relates to the open_generic_xdg_mime function in xdg-open (xdg-utils 1.1.0 rc1) on Debian with dash. The root cause is improper handling of local variables, which enables remote attackers to execute arbitrary commands via a crafted file. Documented impact is command execution with h...

8.8CVSS8.5AI score0.03214EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2021/06/02 4:34 p.m.•41 views

CVE-2015-1877

The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...

8.7AI score0.03214EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2021/06/02 4:34 p.m.•57 views

CVE-2015-1877

The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...

8.8CVSS8.5AI score0.03214EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/02 12:00 a.m.•5 views

CVE-2015-1877: Improper Neutralization of Special Elements used in a Command

The opengenericxdgmime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file...

8.8CVSS6.4AI score0.03214EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/01 2:15 p.m.•20 views

AZL-7424 CVE-2020-27748 affecting package xdg-utils 1.1.3-7

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...

6.5CVSS6.6AI score0.01436EPSS
SaveExploits1References1
NVD
NVD
•added 2021/06/01 2:15 p.m.•22 views

CVE-2020-27748

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...

6.5CVSS0.01436EPSS
SaveExploits1References2
OSV
OSV
•added 2021/06/01 2:15 p.m.•19 views

AZL-37062 CVE-2020-27748 affecting package xdg-utils 1.2.1-3

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...

6.5CVSS6.5AI score0.01436EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/01 2:15 p.m.•24 views

Information disclosure

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...

4.3CVSS6.1AI score0.01436EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/06/01 1:15 p.m.•290 views

CVE-2020-27748

CVE-2020-27748 affects xdg-utils’ xdg-email in 1.1.0-rc1 and newer. Handling mailto: URIs, xdg-email can discreetly attach a file to an email sent to Thunderbird, via code in xdg-email (not Thunderbird). This can lead to exposure of sensitive data if a user unknowingly sends the email with the at...

6.5CVSS6.1AI score0.01436EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/01 12:00 a.m.•5 views

CVE-2020-27748: Insertion of Sensitive Information Into Sent Data

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...

6.5CVSS5.6AI score0.01436EPSS
SaveExploits1References2
Snyk
Snyk
•added 2021/05/24 7:53 p.m.•20 views

Malicious Package

Overview string-utils-assistant is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.4AI score
SaveExploits0References2
Photon
Photon
•added 2021/05/24 12:00 a.m.•53 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0390

An update of 'unbound', 'cifs-utils', 'mysql' packages of Photon OS has been released...

7.5CVSS6.8AI score0.04909EPSS
SaveExploits0
Photon
Photon
•added 2021/05/24 12:00 a.m.•73 views

Critical Photon OS Security Update - PHSA-2021-0390

Updates of 'cifs-utils', 'linux', 'unbound', 'mysql' packages of Photon OS have been released...

9.8CVSS6.9AI score0.0278EPSS
SaveExploits0
Rows per page
Query Builder