CVE-2025-53964

CVE-2025-53964 风险评估 CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 描述 GoldenDict 1.5.0 和 1.5.1 存在一个暴露的危险方法，当用户添加精心制作的词典并在该词典中搜索任意词条时，可以读取和修改文件。 附加信息 该产品提供了与外部行为者交互的接口，其中包含 GoldenDict（版本 1.5.0、1.5.1）中一个未被适当限制的危险方法。这使远程攻击者能够在用户添加并使用恶意词典时，访问并修改用户文件系统上的文件。 漏洞类型...

[SECURITY] Fedora 45 Update: goldendict-ng-2026.03.09-5.20260309git4a4237d.fc45

The Next Generation GoldenDict. A feature-rich open-source dictionary lookup program, supporting multiple dictionary formats and online dictionaries...

EUVD-2025-21824

Malicious code in bioql PyPI...

FreeBSD : goldendict -- dangerous method exposed (4ccd6222-9c83-11f0-a337-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4ccd6222-9c83-11f0-a337-b42e991fc52e advisory. [email protected] reports: GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading a...

Linux Distros Unpatched Vulnerability : CVE-2025-53964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for a...

SUSE CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

UBUNTU-CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict versions 1.5.0 and 1.5.1 are vulnerable to a flaw where an exposed dangerous method allows unauthorized reading and modification of arbitrary files on the user's file system. The root cause involves the lack of XML content sanitization , the absence of JS code execution prohibitions , ...

PT-2025-29966 · Unknown +1 · Goldendict +1

Name of the Vulnerable Software and Affected Versions: GoldenDict versions 1.5.0 through 1.5.1 Description: GoldenDict versions 1.5.0 and 1.5.1 contain a dangerous method that allows reading and modifying files. This occurs when a user adds a crafted dictionary and then searches for any term...

goldendict -- dangerous method exposed

[email protected] reports: GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964: Exposed Dangerous Method or Function

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

goldendict 安全漏洞

goldendict is a feature-rich dictionary lookup program from goldendict open source. A security vulnerability exists in goldendict versions 1.5.0 and 1.5.1, which stems from exposing dangerous methods that could lead to file reads and modifications...

CVE-2025-53964

Removed by vendor...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to perform spoofing attacks.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to trigger a service failure.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...