https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:08:19 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:7672 <p><strong>Affected:</strong> AlmaLinux:9: xdg-utils</p> <p>The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop.</p> <p>Security Fix(es):</p> <p>* xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: xdg-utils</p> <p>The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop.</p> <p>Security Fix(es):</p> <p>* xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments (CVE-2022-4055)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:7672 https://cve.radiocsirt.org/vuln/bdu:2025-04910 bdu:2025-04910 https://cve.radiocsirt.org/vuln/bdu:2025-04910 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-235753 EUVD-2026-235753 https://cve.radiocsirt.org/vuln/euvd-2026-235753 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4055 <p>When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.</p> <p>When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4055 https://cve.radiocsirt.org/vuln/ghsa-p4jr-wm76-h2v3 <p>When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.</p> <p>When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.</p> https://cve.radiocsirt.org/vuln/ghsa-p4jr-wm76-h2v3 https://cve.radiocsirt.org/vuln/gsd-2022-4055 gsd-2022-4055 https://cve.radiocsirt.org/vuln/gsd-2022-4055 https://cve.radiocsirt.org/vuln/msrc_cve-2022-4055 msrc_CVE-2022-4055 https://cve.radiocsirt.org/vuln/msrc_cve-2022-4055 https://cve.radiocsirt.org/vuln/rhsa-2025:7672 <p>xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments</p> <p>xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments</p> https://cve.radiocsirt.org/vuln/rhsa-2025:7672 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4055 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xdg-utils, Ubuntu:18.04:LTS: xdg-utils, Ubuntu:20.04:LTS: xdg-utils, Ubuntu:22.04:LTS: xdg-utils, Ubuntu:24.04:LTS: xdg-utils, Ubuntu:25.10: xdg-utils, Ubuntu:26.04:LTS: xdg-utils</p> <p>When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xdg-utils, Ubuntu:18.04:LTS: xdg-utils, Ubuntu:20.04:LTS: xdg-utils, Ubuntu:22.04:LTS: xdg-utils, Ubuntu:24.04:LTS: xdg-utils, Ubuntu:25.10: xdg-utils, Ubuntu:26.04:LTS: xdg-utils</p> <p>When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4055 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1074 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1074