https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:57:42.182990+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-00593 cnvd-2018-00593 2026-10-09T10:57:42.186521+00:00 cnvd-2018-00593 https://cve.radiocsirt.org/vuln/euvd-2026-79591 EUVD-2026-79591 2026-10-09T10:57:42.186554+00:00 EUVD-2026-79591 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17517 fkie_cve-2017-17517 2026-10-09T10:57:42.186568+00:00

libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-834x-38jv-m3qg GHSA-834x-38jv-m3qg 2026-10-09T10:57:42.186598+00:00

libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2017-17517 gsd-2017-17517 2026-10-09T10:57:42.186614+00:00 gsd-2017-17517 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17517 UBUNTU-CVE-2017-17517 2026-10-09T10:57:42.186625+00:00

Affected: Ubuntu:16.04:LTS: sylpheed, Ubuntu:18.04:LTS: sylpheed, Ubuntu:20.04:LTS: sylpheed, Ubuntu:22.04:LTS: sylpheed, Ubuntu:24.04:LTS: sylpheed, Ubuntu:25.10: sylpheed

libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.