Read the docs

Freedesktop

Records159All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high50CVSS 7.0–8.9

Exploited now

Freedesktop records in CISA KEV
TI-2021-11232 Apple Multiple Products Integer Overflow Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Poppler 88 records CRITICAL Dbus 24 records MEDIUM Udisks 5 records LOW Xdg-utils 5 records HIGH Libinput 4 records HIGH Accountsservice 3 records LOW Gst-plugins-good 3 records LOW Dbus-glib 2 records LOW

Records

5 records in Xdg-utils · all components

TI-2017-13451 CVE-2017-18266 · GHSA-76r6-j2q8-m63q

The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings…

Priority MEDIUM 43

The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02399 Published 2018-05-10 No fix listed CWE-74
TI-2009-00064 CVE-2009-0068 · GHSA-c244-p864-46qg

Interaction error in xdg-open allows remote attackers to execute arbitrary code by…

Priority LOW 34

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dang…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02164 Published 2009-01-07 No fix listed CWE-94
Open these records in search →