Vulnerabilities

TI-2014-07813 CVE-2014-9622 · GHSA-q937-m2fx-r449

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop…

LOW 36

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03256 Published 2015-01-21 No fix listed CWE-77

TI-2008-00361 CVE-2008-0386 · GHSA-w4vh-2xrr-v7qg

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary…

LOW 36

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03171 Published 2008-02-04 No fix listed CWE-20

Vulnerabilities

Filters

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop…

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary…