mate-desktop records
5 published records for vendor mate-desktop.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-25 Path Traversal: '/../filedir'1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2023-52138No exploit | Path traversal via crafted cpio archives in Engrampa archiversmate-desktop · engrampa · CWE-25 | Critical9.6 | — | 1.6% | Feb 5, 2024 |
36Monitor | CVE-2023-51698No exploit | Atril's CBT comic book parsing vulnerable to Remote Code Executionmate-desktop · atril · CWE-78 | High8.8 | — | 2.3% | Jan 12, 2024 |
31Monitor | CVE-2023-52076Proof of concept | Remote Code Execution Vulnerability in Atril's EPUB ebook parsingmate-desktop · atril · CWE-22 | High7.8 | — | 1.0% | Jan 25, 2024 |
24Monitor | CVE-2018-20681No exploit | mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly controlmate-desktop · mate-screensaver · CWE-200 | Medium6.1 | — | 0.5% | Jan 9, 2019 |
8Monitor | CVE-2012-5560No exploit | The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call.mate-desktop · mate-settings-daemon · CWE-264 | Low2.1 | — | 0.3% | May 30, 2014 |
- CVE-2023-5213838Monitor
Path traversal via crafted cpio archives in Engrampa archivers
CriticalCVSS 9.6No exploitEPSS 1%mate-desktop · engrampaFeb 5, 2024
- CVE-2023-5169836Monitor
Atril's CBT comic book parsing vulnerable to Remote Code Execution
HighCVSS 8.8No exploitEPSS 2%mate-desktop · atrilJan 12, 2024
- CVE-2023-5207631Monitor
Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
HighCVSS 7.8Proof of conceptEPSS 1%mate-desktop · atrilJan 25, 2024
- CVE-2018-2068124Monitor
mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control
MediumCVSS 6.1No exploitEPSS 0%mate-desktop · mate-screensaverJan 9, 2019
- CVE-2012-55608Monitor
The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call.
LowCVSS 2.1No exploitEPSS 0%mate-desktop · mate-settings-daemonMay 30, 2014