Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:07:08 +0000 CVE-2025-3155 — Yelp: arbitrary file read https://vulnerability.circl.lu/vuln/cve-2025-3155 <p><strong>Affected:</strong> yelp, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support and 6 more</p> <p>A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.</p> <p><strong>Affected:</strong> yelp, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support and 6 more</p> <p>A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.</p> https://vulnerability.circl.lu/vuln/cve-2025-3155 USN-7447-1 — yelp, yelp-xsl vulnerability https://vulnerability.circl.lu/vuln/usn-7447-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: yelp, Ubuntu:20.04:LTS: yelp-xsl, Ubuntu:22.04:LTS: yelp, Ubuntu:22.04:LTS: yelp-xsl, Ubuntu:24.04:LTS: yelp, Ubuntu:24.04:LTS: yelp-xsl</p> <p>It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious downloaded help files and exfiltrate sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: yelp, Ubuntu:20.04:LTS: yelp-xsl, Ubuntu:22.04:LTS: yelp, Ubuntu:22.04:LTS: yelp-xsl, Ubuntu:24.04:LTS: yelp, Ubuntu:24.04:LTS: yelp-xsl</p> <p>It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious downloaded help files and exfiltrate sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-7447-1