Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2008-0386

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

CVSS 2.0 · 6.8 Medium EPSS 3.2% KEV · Not listed
Vendors
Gentoo Mandrakesoft
Products
Xdg-utils Mandrake Linux
CVE-2014-9622

xdg-utils: Eval injection in xdg-open allows arbitrary command execution on crafted URL

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.

CVSS 3.0 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Gentoo
Products
Xdg-utils