Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2020-24972

The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.

CVSS 3.1 · 8.8 High EPSS 4.9% KEV · Not listed
Vendors
Fedoraproject Kleopatra Project Opensuse
Products
Fedora Kleopatra Backports Sle and 1 more