https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:09 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cleanstart-2024-bu71046 <p><strong>Affected:</strong> CleanStart: gnome-shell</p> <p>Security vulnerability affects the gnome-shell package. It was discovered that the gnome-shell lock screen since version 3.</p> <p><strong>Affected:</strong> CleanStart: gnome-shell</p> <p>Security vulnerability affects the gnome-shell package. It was discovered that the gnome-shell lock screen since version 3.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-bu71046 https://cve.radiocsirt.org/vuln/euvd-2026-49737 EUVD-2026-49737 https://cve.radiocsirt.org/vuln/euvd-2026-49737 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3820 <p>It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.</p> <p>It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3820 https://cve.radiocsirt.org/vuln/ghsa-jh4v-7q79-jf56 <p>It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.</p> <p>It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.</p> https://cve.radiocsirt.org/vuln/ghsa-jh4v-7q79-jf56 https://cve.radiocsirt.org/vuln/gsd-2019-3820 gsd-2019-3820 https://cve.radiocsirt.org/vuln/gsd-2019-3820 https://cve.radiocsirt.org/vuln/oesa-2021-1403 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: gnome-shell, openEuler:20.03-LTS-SP2: gnome-shell</p> <p>The GNOME Shell redefines user interactions with the GNOME desktop. In particular, it offers new paradigms for launching applications, accessing documents, and organizing open windows in GNOME. Later, it will introduce a new applets eco-system and offer new solutions for other desktop features, such as notifications and contacts management. The GNOME Shell is intended to replace functions handled by the GNOME Panel and by the window manager in previous versions of GNOME. The GNOME Shell has rich visual effects enabled by new graphical technologies. Security Fix(es): It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.(CVE-2019-3820)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: gnome-shell, openEuler:20.03-LTS-SP2: gnome-shell</p> <p>The GNOME Shell redefines user interactions with the GNOME desktop. In particular, it offers new paradigms for launching applications, accessing documents, and organizing open windows in GNOME. Later, it will introduce a new applets eco-system and offer new solutions for other desktop features, such as notifications and contacts management. The GNOME Shell is intended to replace functions handled by the GNOME Panel and by the window manager in previous versions of GNOME. The GNOME Shell has rich visual effects enabled by new graphical technologies. Security Fix(es): It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.(CVE-2019-3820)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1403 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10797-1 <p>gnome-extensions-40.5-1.1 on GA media</p> <p>gnome-extensions-40.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10797-1 https://cve.radiocsirt.org/vuln/rhba-2020:1539 <p>expat: Integer overflow leading to buffer overflow in XML_GetBuffer() libxml2: DoS caused by incorrect error detection during XZ decompression libxml2: Use after free triggered by XPointer paths beginning with range-to libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c libxml2: Unrestricted memory usage in xz_head() function in xzlib.c file: out-of-bounds read via a crafted ELF file libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c libxml2: Infinite loop caused by incorrect error detection during LZMA decompression python-requests: Redirect from HTTPS to HTTP does not remove Authorization header python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure python: Cookie domain check returns incorrect results gnome-shell: partial lock screen bypass curl: TFTP receive heap buffer overflow in tftp_receive_packet() function bash: BASH_CMD is writable in restricted bash shells python-urllib3: CRLF injection due to not encoding the &#39;\r\n&#39; sequence leading to possible attack on internal service python: email.utils.parseaddr wrongly parses email addresses rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c ansible: shell enabled by default in a pipe lookup plugin subprocess ansible: path injection on dest parameter in fetch module ansible: atomic_move primitive sets permissive permiss…</p> <p>expat: Integer overflow leading to buffer overflow in XML_GetBuffer() libxml2: DoS caused by incorrect error detection during XZ decompression libxml2: Use after free triggered by XPointer paths beginning with range-to libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c libxml2: Unrestricted memory usage in xz_head() function in xzlib.c file: out-of-bounds read via a crafted ELF file libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c libxml2: Infinite loop caused by incorrect error detection during LZMA decompression python-requests: Redirect from HTTPS to HTTP does not remove Authorization header python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure python: Cookie domain check returns incorrect results gnome-shell: partial lock screen bypass curl: TFTP receive heap buffer overflow in tftp_receive_packet() function bash: BASH_CMD is writable in restricted bash shells python-urllib3: CRLF injection due to not encoding the &#39;\r\n&#39; sequence leading to possible attack on internal service python: email.utils.parseaddr wrongly parses email addresses rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c ansible: shell enabled by default in a pipe lookup plugin subprocess ansible: path injection on dest parameter in fetch module ansible: atomic_move primitive sets permissive permiss…</p> https://cve.radiocsirt.org/vuln/rhba-2020:1539 https://cve.radiocsirt.org/vuln/suse-su-2019:1390-1 <p>Security update for gnome-shell</p> <p>Security update for gnome-shell</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1390-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3820 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gnome-shell, Ubuntu:18.04:LTS: gnome-shell</p> <p>It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gnome-shell, Ubuntu:18.04:LTS: gnome-shell</p> <p>It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3820 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548