Skip to content
OpenAdvisories

Package · Debian

liferea

3 known vulnerabilities.

3 results · Feed

  • Medium 6.3

    liferea Feed Enrichment update.c update_job_run os command injection

    A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-ite…

  • Unscored —

    Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain…

  • Unscored —

    Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY…