Pyxdg

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-12761 Jun 06, 19:29 PyPI HIGH POC PATCH This Week

A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

RCE Python Code Injection Pyxdg

NVD GitHub

CVSS 3.0

7.5

EPSS

2.1%

CVE-2014-1624 Jan 28, 00:55 PyPI LOW PATCH Monitor

Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to. Rated low severity (CVSS 3.3).

Python Information Disclosure Pyxdg

NVD

CVSS 2.0

3.3

EPSS

0.0%

CVE-2019-12761 PyPI

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

RCE Python Code Injection +1

NVD GitHub

CVE-2014-1624 PyPI

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Python Information Disclosure Pyxdg

NVD