Lucene search
+L

5092 matches found

Debian
Debian
•added 2015/02/22 5:00 a.m.•57 views

[SECURITY] [DSA 3165-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

6.8CVSS0.7AI score0.03214EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2015/02/21 12:00 a.m.•28 views

Debian Security Advisory DSA 3165-1 (xdg-utils - security update)

Jiri Horner discovered a way to cause xdg-open, a tool that automatically opens URLs in a user OpenVAS Vulnerability Test $Id: deb3165.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3165-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

8.6AI score0.03214EPSS
SaveExploits0References1
OSV
OSV
•added 2015/02/21 12:00 a.m.•16 views

DSA-3165-1 xdg-utils - security update

Bulletin has no description...

8.8CVSS8.7AI score0.03214EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2015/02/20 12:00 a.m.•34 views

Debian: Security Advisory (DSA-3165-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.03214EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2015/02/19 3:00 p.m.•22 views

CVE-2014-8165

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

10CVSS7.2AI score0.02763EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/02/19 12:00 a.m.•2 views

CVE-2014-8165: Insufficient Verification of Data Authenticity

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

10CVSS6.5AI score0.02763EPSS
SaveExploits0References2
OSV
OSV
•added 2015/02/11 8:47 p.m.•13 views

MGASA-2015-0058 Updated xdg-utils packages fix CVE-2014-9622

Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely CVE-2014-9622. The xdg-utils has been updated to a much more recent snapshot, and...

6.8CVSS9AI score0.03256EPSS
SaveExploits1References3
Mageia
Mageia
•added 2015/02/11 8:47 p.m.•42 views

Updated xdg-utils packages fix CVE-2014-9622

Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely CVE-2014-9622. The xdg-utils has been updated to a much more recent snapshot, and...

6.8CVSS9AI score0.03256EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2015/02/03 12:00 a.m.•31 views

openSUSE Security Update : xdg-utils (openSUSE-SU-2015:0191-1)

This update fixes the following security issue : - Fix Remote code execution in xdg-open due to bad quotes handling CVE-2014-9622 bnc913676. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

6.8CVSS8.3AI score0.03256EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2015/01/28 12:00 a.m.•129 views

CentOS Update for glibc CESA-2015:0092 centos7

Check the version of glibc SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882108";...

10CVSS7.3AI score0.94558EPSS
SaveExploits29References2
Fedora
Fedora
•added 2015/01/26 2:33 a.m.•16 views

[SECURITY] Fedora 21 Update: xdg-utils-1.1.0-0.35.rc3.fc21

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop, such as Linux. They are intended to provide a set of defacto standards. This means that: Third party software developers can rely on these xdg-utils for all of their simple...

1.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/01/26 12:00 a.m.•14 views

Fedora 21 : xdg-utils-1.1.0-0.35.rc3.fc21 (2015-0954)

refresh packaging to 1.1.0-rc3, and include fix for possible command injection vulnerability, see https://bugs.freedesktop.org/showbug.cgi?id=66670 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

5.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/01/26 12:00 a.m.•17 views

Fedora Update for xdg-utils FEDORA-2015-0954

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2015/01/24 11:13 a.m.•12 views

SUSE-SU-2015:0271-1 Security update for xdg-utils

This update of xdg-utils fixes a command injection security problem CVE-2014-9622, bsc913676 and a bug when opening files where multiple mime handlers existed bsc906625...

6.8CVSS9AI score0.03256EPSS
SaveExploits1References4
OSV
OSV
•added 2015/01/21 6:59 p.m.•9 views

CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

8.8AI score
SaveExploits0References8
NVD
NVD
•added 2015/01/21 6:59 p.m.•21 views

CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

6.8CVSS7.5AI score0.03256EPSS
SaveExploits1References8
OSV
OSV
•added 2015/01/21 6:59 p.m.•4 views

DEBIAN-CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

6.8CVSS8.3AI score0.03256EPSS
SaveExploits1References1
Prion
Prion
•added 2015/01/21 6:59 p.m.•25 views

Design/Logic Flaw

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

6.8CVSS8.1AI score0.03256EPSS
SaveExploits1References8Affected Software1
UbuntuCve
UbuntuCve
•added 2015/01/21 6:59 p.m.•25 views

CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

6.8CVSS7.3AI score0.03256EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2015/01/21 6:00 p.m.•60 views

CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

6.8CVSS6.9AI score0.03256EPSS
SaveExploits1
Rows per page
Query Builder