https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:25:56.110230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00111 bdu:2018-00111 2026-10-05T13:25:56.121833+00:00 bdu:2018-00111 https://cve.radiocsirt.org/vuln/cleanstart-2024-se84870 CLEANSTART-2024-SE84870 — backend/comics/comics-document 2026-10-05T13:25:56.121873+00:00

Affected: CleanStart: evince

Security vulnerability affects the evince package. backend/comics/comics-document.

 https://cve.radiocsirt.org/vuln/cnvd-2017-25532 cnvd-2017-25532 2026-10-05T13:25:56.121906+00:00 cnvd-2017-25532 https://cve.radiocsirt.org/vuln/euvd-2026-80767 EUVD-2026-80767 2026-10-05T13:25:56.121919+00:00 EUVD-2026-80767 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000083 fkie_cve-2017-1000083 2026-10-05T13:25:56.121930+00:00

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

 https://cve.radiocsirt.org/vuln/ghsa-c796-cmwx-5c79 GHSA-c796-cmwx-5c79 2026-10-05T13:25:56.121954+00:00

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000083 gsd-2017-1000083 2026-10-05T13:25:56.121969+00:00 gsd-2017-1000083 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10742-1 openSUSE-SU-2024:10742-1 — evince-40.4-1.3 on GA media 2026-10-05T13:25:56.121979+00:00

evince-40.4-1.3 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2017:1893-1 SUSE-SU-2017:1893-1 — Security update for evince 2026-10-05T13:25:56.121997+00:00

Security update for evince

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1000083 UBUNTU-CVE-2017-1000083 2026-10-05T13:25:56.122011+00:00

Affected: Ubuntu:14.04:LTS: evince, Ubuntu:16.04:LTS: atril, Ubuntu:16.04:LTS: evince

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.