Поиск уязвимостей
Количество 15
Количество 15
ALT-PU-2020-4295
ALT-PU-2020-4295: package `python-module-pyxdg` update to version 0.26-alt1
CVE-2019-12761
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.
CVE-2019-12761
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.
CVE-2019-12761
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.
CVE-2019-12761
A code injection issue was discovered in PyXDG before 0.26 via crafted ...
CVE-2014-1624
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.
CVE-2014-1624
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.
CVE-2014-1624
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.
CVE-2014-1624
Race condition in the xdg.BaseDirectory.get_runtime_dir function in py ...
SUSE-SU-2022:2997-1
Security update for python-pyxdg
SUSE-SU-2019:2719-2
Security update for python-xdg
SUSE-SU-2019:2719-1
Security update for python-xdg
GHSA-r6v3-hpxj-r8rv
Code Injection in PyXDG
GHSA-7372-q459-jxhr
pyxdg Arbitrary File Overwrite via Race Condition
BDU:2021-05299
Уязвимость библиотеки языка программирования Python pyxdg, связанная с неверным управлением генерацией кода, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-4295 ALT-PU-2020-4295: package `python-module-pyxdg` update to version 0.26-alt1 | CVSS3: 7.5 | больше 6 лет назад | |
 | CVE-2019-12761 A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call. | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-12761 A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call. | CVSS3: 6.1 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-12761 A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call. | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| CVE-2019-12761 A code injection issue was discovered in PyXDG before 0.26 via crafted ... | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| CVE-2014-1624 Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called. | CVSS2: 3.3 | 0% Низкий | почти 13 лет назад |
| CVE-2014-1624 Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called. | CVSS2: 3.3 | 0% Низкий | почти 13 лет назад |
| CVE-2014-1624 Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called. | CVSS2: 3.3 | 0% Низкий | почти 13 лет назад |
| CVE-2014-1624 Race condition in the xdg.BaseDirectory.get_runtime_dir function in py ... | CVSS2: 3.3 | 0% Низкий | почти 13 лет назад |
 | SUSE-SU-2022:2997-1 Security update for python-pyxdg | 2% Низкий | около 4 лет назад | |
| SUSE-SU-2019:2719-2 Security update for python-xdg | 0% Низкий | почти 7 лет назад | |
| SUSE-SU-2019:2719-1 Security update for python-xdg | 0% Низкий | около 7 лет назад | |
| GHSA-r6v3-hpxj-r8rv Code Injection in PyXDG | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| GHSA-7372-q459-jxhr pyxdg Arbitrary File Overwrite via Race Condition | 0% Низкий | больше 4 лет назад | |
 | BDU:2021-05299 Уязвимость библиотеки языка программирования Python pyxdg, связанная с неверным управлением генерацией кода, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
Уязвимостей на страницу