Login Request a demo
XD
Product
Xdg-utils
by Freedesktop · last CVE Nov 19, 2022
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities5Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Xdg-utils to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-1877
8.8
3%
Jun 2
The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to…
Affected: 1.1.0
CVE-2017-18266
8.8
2%
May 10
The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might…
Affected: before 1.1.3
CVE-2022-4055
7.4
1%
Nov 19
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included…
Affected: 1.1.0 through 1.1.3
CVE-2020-27748
6.5
1%
Jun 1
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer
Affected: 1.1.0 and later
CVE-2009-0068
–
2%
Jan 7
Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open,…
Affected: 1.0
Showing 5