Поиск уязвимостей
Количество 10
Количество 10
GHSA-p4jr-wm76-h2v3
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4055
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4055
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4055
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4055
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4055
When xdg-mail is configured to use thunderbird for mailto URLs, improp ...
RLSA-2025:7672
Moderate: xdg-utils security update
ELSA-2025-7672
ELSA-2025-7672: xdg-utils security update (MODERATE)
BDU:2025-04910
Уязвимость утилиты для открытия почтового клиента из набора xdg-utils xdg-mail, связанная с недостаточной проверкой введенных пользователем данных, позволяющая нарушителю оказать влияние на целостность защищаемой информации
ALT-PU-2024-10322
ALT-PU-2024-10322: package `xdg-utils` update to version 1.2.1-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-p4jr-wm76-h2v3 When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked. | CVSS3: 7.4 | 1% Низкий | почти 4 года назад |
 | CVE-2022-4055 When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked. | CVSS3: 7.4 | 1% Низкий | почти 4 года назад |
 | CVE-2022-4055 When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked. | CVSS3: 7.4 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-4055 When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked. | CVSS3: 7.4 | 1% Низкий | почти 4 года назад |
 | CVE-2022-4055 When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked. | CVSS3: 7.4 | 1% Низкий | почти 2 года назад |
| CVE-2022-4055 When xdg-mail is configured to use thunderbird for mailto URLs, improp ... | CVSS3: 7.4 | 1% Низкий | почти 4 года назад |
 | RLSA-2025:7672 Moderate: xdg-utils security update | 1% Низкий | около 1 года назад | |
| ELSA-2025-7672 ELSA-2025-7672: xdg-utils security update (MODERATE) | 1% Низкий | больше 1 года назад | |
 | BDU:2025-04910 Уязвимость утилиты для открытия почтового клиента из набора xdg-utils xdg-mail, связанная с недостаточной проверкой введенных пользователем данных, позволяющая нарушителю оказать влияние на целостность защищаемой информации | CVSS3: 7.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2024-10322 ALT-PU-2024-10322: package `xdg-utils` update to version 1.2.1-alt2 | CVSS3: 7.4 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу