GCVE - cpe:2.3:a:logilab:logilab-common:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:logilab:logilab-common:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Logilab (`fc505766-5874-5c55-afa5-1fb72b7efb57`)
Product	Logilab Common (`6c85bd4d-892d-59a0-823c-50bea71b04f6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:deb/debian/logilab-common`	purl2cpe	2026-06-01 10:12:43.961420
`pkg:deb/ubuntu/logilab-common`	purl2cpe	2026-06-01 10:12:43.961424
`pkg:github/cbonnet99/logilab_common`	purl2cpe	2026-06-01 10:12:43.961427
`pkg:github/musicmetric/logilab-common`	purl2cpe	2026-06-01 10:12:43.961429
`pkg:github/pombredanne/logilab-common`	purl2cpe	2026-06-01 10:12:43.961432
`pkg:pypi/logilab-common`	purl2cpe	2026-06-01 10:12:43.961435
`pkg:rpm/opensuse/python-logilab-common`	purl2cpe	2026-06-01 10:12:43.961438

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-1839`	vulnerable	2026-06-08 05:05:26.408817	Details available The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. Published: 2014-03-11T15:00:00.000Z Updated: 2024-08-06T09:50:11.358Z Open on db.gcve.eu Reference links http://www.logilab.org/ticket/207562 http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html http://secunia.com/advisories/57209 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051 http://comments.gmane.org/gmane.comp.security.oss.general/11986	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1838`	vulnerable	2026-06-08 05:05:26.408197	Details available The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf. Published: 2014-03-11T15:00:00.000Z Updated: 2024-08-06T09:50:11.304Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2014-02/msg00085.html http://secunia.com/advisories/57209 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051 http://www.logilab.org/ticket/207561 http://comments.gmane.org/gmane.comp.security.oss.general/11986	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.