Code injection

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

CVE-2021-3401

CVE-2021-3401 affects Bitcoin Core prior to 0.19.0. The flaw arises when another application unsafely passes the -platformpluginpath argument to bitcoin-qt, which can be triggered by an x-scheme-handler/bitcoin .desktop file or a web browser. The underlying issue is unsafe handling of the platfor...

Remote Code Execution (RCE)

Google Chrome is vulnerable to remote code execution. An attacker may execute arbitrary code via a downloaded .desktop file that the victim has downloaded...

DEBIAN-CVE-2020-25265

AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...

CVE-2020-25265

AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...

CVE-2020-25265

AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...

CVE-2020-25265

AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...

CVE-2020-25265

AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...

CVE-2020-25265

The CVE-2020-25265 entry concerns AppImage libappimage prior to 1.0.3. It describes a bug where an attacker can cause an overwrite of a system-installed .desktop file by supplying a crafted .desktop file that contains Name= with path components. The impact is described as enabling file overwrite,...

File Overwrite

libappimage.so is vulnerable to a file overwrite. An attacker can trigger an overwriting a system-installed .desktop file by providing a .desktop file that contains Name= with path components as it does not properly validate the Name field...

ALSA-2020:4443 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

Exploit for CVE-2020-25265

CVE-2020-25265 / CVE-2020-25266 - CVE-2020-25265https://nv...

Huawei EulerOS: Security Advisory for nautilus (EulerOS-SA-2018-1053)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL MAIN 5.04 : nautilus Vulnerability (NS-SA-2019-0015)

The remote NewStart CGSL host, running version MAIN 5.04, has nautilus packages installed that are affected by a vulnerability: - An untrusted .desktop file with executable permission set could choose its displayed name and icon, and execute commands without warning when opened by the user. An...

Debian: Security Advisory (DSA-4494-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:3064-3 Security update for java-1_8_0-openjdk

This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

The vulnerability of Google Chrome, related to improper input validation, allows a malicious user to download a .desktop file that can execute arbitrary code.

The vulnerability of Google Chrome relates to errors during the processing of .desktop files in SafeBrowsing. Exploiting this vulnerability allows an attacker to download the .desktop file to execute arbitrary code...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2019-774)

This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues : These security issues were fixed : - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...