Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Logilab Subscribe
Filtered by product Logilab-common
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-1838 2 Logilab, Opensuse 2 Logilab-common, Opensuse 2018-10-30 4.4 MEDIUM N/A
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
CVE-2014-1839 2 Logilab, Opensuse 2 Logilab-common, Opensuse 2018-10-30 4.4 MEDIUM N/A
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.