58 matches found
CLEANSTART-2026-OL13486 Security fix for GHSA-2r2c-cx56-8933 applied in: apache-hive 4.1.0-r5, apache-hive 4.2.0-r7, confluent-kafka 8.3.0-r1, kafka 4.3.1-r1, spark-sc213-jdk17-py312 3.5.8-r0, spark-sc213-jdk17-py312 4.0.3-r0, spark-sc213-jdk17-py312 4.1.2-r0
GHSA-2r2c-cx56-8933 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
Linux Distros Unpatched Vulnerability : CVE-2026-8933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure...
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Cybersecurity researchers have disclosed details of a new local privilege escalation LPE vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 CVSS score: 7.8,...
DEBIAN-CVE-2026-8933
A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...
CVE-2026-8933
creationtimestamp| type| source ---|---|--- 2026-07-21 15:08:09+00:00| seen| https://bsky.app/profile/arc-codex.com/post/3mr63m2s54b2k 2026-07-21 15:23:47+00:00| seen| https://bsky.app/profile/arc-codex.com/post/3mr64hz2xco2g 2026-07-21 15:36:50+00:00| seen|...
CVE-2026-8933
A local privilege escalation affecting snap-confine (used by Canonical snapd) configured with set-capabilities. The flaw lies in how privilege boundaries/security sandboxes are initialized when running under limited ambient capabilities, allowing an unprivileged local user to bypass restrictions ...
GHSA-2R2C-CX56-8933 vulnerabilities
Vulnerabilities for packages: druid, confluent-kafka, apache-nifi, tez, apache-pulsar, spark, kafka, zookeeper...
SUSE CVE-2017-7499
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-8933. Reason: This candidate is a reservation duplicate of CVE-2017-8933. Notes: All CVE users should reference CVE-2017-8933 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
Linux Distros Unpatched Vulnerability : CVE-2020-8933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role roles/compute.osLogi...
CVE-2025-8933
A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2020-8933
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems. Within ...
Linux Distros Unpatched Vulnerability : CVE-2015-8933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the archivereadformattarskip function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial ...
CVE-2024-8933
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To be successful, the attacker needs to...
CVE-2024-8933
creationtimestamp| type| source ---|---|--- 2024-11-13 05:47:58+00:00| seen| https://t.me/cvedetector/10791 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-03 2026-04-14 13:10:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhczv3a...
CVE-2024-8933
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To be successful, the attacker needs to...
CVE-2024-8933
CVE-2024-8933 affects Schneider Electric Modicon M340, MC80, and Momentum Unity M1E controllers. The issue is improper enforcement of message integrity during transmission in a communication channel (CWE-924) and related authentication concerns (CWE-290) that could allow retrieval of a password h...
CVE-2024-8933
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To be successful, the attacker needs to...
SUSE CVE-2015-8933
Integer overflow in the archivereadformattarskip function in archivereadsupportformattar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file...
SUSE CVE-2017-8933
Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service menu unavailability...
MSC-2022-8933
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...