Lucene search
K

9 matches found

AlpineLinux
AlpineLinux
added 2025/04/20 3:15 a.m.2 views

CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS9.6AI score0.00087EPSS
Exploits1References5
OSV
OSV
added 2025/04/20 3:15 a.m.1 views

UBUNTU-CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

7.8CVSS5.8AI score0.00087EPSS
Exploits1References6
CVE
CVE
added 2025/04/20 12:0 a.m.105 views

CVE-2025-43929

CVE-2025-43929 affects kitty before 0.41.0. The issue arises because open_actions.py does not prompt for user confirmation before executing a local file that could be linked from an untrusted document (e.g., KDE Ghostwriter exports). Affects Kitty component (kitty) with local attack surface; expl...

7.8CVSS7.1AI score0.00087EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/20 12:0 a.m.9 views

CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

4.1CVSS4.5AI score0.00087EPSS
Exploits1References5
OSV
OSV
added 2025/03/06 6:37 p.m.3 views

CVE-2025-24796 Remote Code Execution within Collabora Online jail with Macros Enabled

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations...

6.3CVSS6.8AI score0.00112EPSS
Exploits0References3
NVD
NVD
added 2020/11/17 4:15 p.m.14 views

CVE-2020-13958

A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no internal protocol may be called from the documen...

9.3CVSS7.3AI score0.01017EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/11/13 12:0 a.m.62 views

Apache OpenOffice < 4.1.8 Arbitrary Code Execution

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.8. It is, therefore, affected by an arbitrary code execution vulnerability in its scripting events component. An unauthenticated, remote attacker can exploit this, by convincing a user to download and open a...

9.3CVSS8.1AI score0.01017EPSS
Exploits0References3
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.3 views

Updates are available that improve the content in warning messages that you receive when you run local executable files in Windows

Updates are available that improve the content in warning messages that you receive when you run local executable files in Windows Introduction This article describes some updates that improve the content in warning messages that you receive when you try to run local executable files in Windows...

6.2AI score
Exploits0
Cvelist
Cvelist
added 2002/03/30 5:0 a.m.21 views

CVE-2002-0077

Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable...

6.3AI score0.0794EPSS
Exploits0References2
Rows per page
Query Builder