[{"CVE":"CVE-2017-18266","severity":"low","public_date":"2017-11-18T00:00:00Z","advisories":[],"bugzilla":"1578767","bugzilla_description":"CVE-2017-18266 xdg-utils: Argument injection vulnerability in open_envvar() function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-88","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18266.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2015-1877","severity":"moderate","public_date":"2015-02-11T00:00:00Z","advisories":[],"bugzilla":"1194205","bugzilla_description":"CVE-2015-1877 xdg-utils: command injection vulnerability due to local variables collision in xdg-open","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1877.json"},{"CVE":"CVE-2014-9622","severity":"moderate","public_date":"2013-06-10T00:00:00Z","advisories":[],"bugzilla":"1183629","bugzilla_description":"CVE-2014-9622 xdg-utils: Eval injection in xdg-open allows arbitrary command execution on crafted URL","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-95","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9622.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.8"}]