Vendor/product archive

logilab / logilab-common CVEs

Beta · best-effort

2 CVEs tagged to logilab / logilab-common — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to logilab vendor archive

CVE-2014-1839

Published Mar 11, 2014

The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.

CVSS 4.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-1838

Published Mar 11, 2014

The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other uns…

CVSS 4.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1