Known vulnerabilities in xdg-desktop-portal-gtk (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: xdg-desktop-portal-gtk (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:xdg-desktop-portal-gtk_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 53
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xdg-desktop-portal-gtk (Red Hat package) xdg-desktop-portal-gtk (Red Hat package) is affected by 53 known vulnerabilities: 33 high, 12 medium, 8 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9925		 CWE-79 Medium
No
No
 1.6.0-1.el8 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32969 - Permissions, Privileges, and Access Controls
CVE-2020-9915		 CWE-264 Medium
No
No
 1.6.0-1.el8 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32968 - Use After Free
CVE-2020-9895		 CWE-416 High
No
No
 1.6.0-1.el8 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32967 - Out-of-bounds read
CVE-2020-9894		 CWE-125 Medium
No
No
 1.6.0-1.el8 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32966 - Use After Free
CVE-2020-9893		 CWE-416 High
No
No
 1.6.0-1.el8 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32965 - Command injection
CVE-2020-9862		 CWE-77 Medium
No
No
 1.6.0-1.el8 02.08.2020 SB2020080202
SB2020080203
SB2020082501
and 11 more
#VU32964 - Improper input validation
CVE-2020-9850		 CWE-20 High
Available
No
 1.6.0-1.el8 02.08.2020 SB2020071482
SB2020072610
SB2020070947
and 10 more
#VU23183 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8771		 CWE-79 Low
No
No
 1.6.0-1.el8 02.12.2019 SB2019102922
SB2019113004
SB2019113005
and 7 more
#VU23182 - Exposure of sensitive information to an unauthorized actor
CVE-2019-8769		 CWE-200 Medium
No
No
 1.6.0-1.el8 02.12.2019 SB2019102922
SB2019113004
SB2019113005
and 7 more
#VU23175 - Memory corruption
CVE-2019-8720		 CWE-119 High
No
Exploited
 1.6.0-1.el8 02.12.2019 SB2019102922
SB2019113004
SB2019113005
and 7 more
#VU23162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8813		 CWE-79 Low
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU23161 - Memory corruption
CVE-2019-8812		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 8 more
#VU23160 - Memory corruption
CVE-2019-8811		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU23159 - Memory corruption
CVE-2019-8808		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 9 more
#VU23158 - Memory corruption
CVE-2019-8783		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU23157 - Memory corruption
CVE-2019-8782		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 10 more
#VU23156 - Memory corruption
CVE-2019-8766		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 10 more
#VU23154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8764		 CWE-79 Low
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU23153 - Memory corruption
CVE-2019-8743		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU23152 - Memory corruption
CVE-2019-8710		 CWE-119 High
No
No
 1.6.0-1.el8 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more


Showing elements 21 - 40 out of 53