Logilab

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Logilab records in CISA KEV

No Logilab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Logilab-common 2 records LOW

Records

2 records

TI-2014-01441 CVE-2014-1839 · GHSA-g5m2-22h2-rr3j

The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp…

LOW 20

The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00352 Published 2014-03-11 Fixed in 0.61.0 CWE-378

TI-2014-01440 CVE-2014-1838 · GHSA-rr52-wg7f-8875

The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons…

LOW 20

The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00343 Published 2014-03-11 Fixed in 0.61.0 CWE-59

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0