Product

debian/pithos vulnerabilities

2 published CVES affecting debian/pithos, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 0
Medium: 1
Low: 1
Unscored: 0
CISA KEV: 0

Latest debian/pithos CVEs

Newest publication first

CVE-2010-4817 pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
Published 2019-11-13

MediumCVSS 5.5 EPSS 0.41%

pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
CVE-2011-1500 PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by....
Published 2011-04-13

LowCVSS 2.1 EPSS 0.34%

PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

debian/pithos vulnerabilities

Latest debian/pithos CVEs

CVE-2010-4817 pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.

CVE-2011-1500 PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by....