Lucene search
+L

1919 matches found

NVD
NVD
•added 2026/01/14 12:16 p.m.•15 views

CVE-2025-14338

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

8.5CVSS0.00229EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/14 11:55 a.m.•10 views

CVE-2025-14338 Polkit authentication dis isabled by default in inputplumber

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

8.5CVSS5.8AI score0.00229EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/14 11:55 a.m.•12 views

CVE-2025-14338

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

8.5CVSS5.5AI score0.00229EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/14 11:55 a.m.•62 views

CVE-2025-14338

CVE-2025-14338 describes a Polkit-related race condition affecting authentication checks, tied to InputPlumber and echoing issues from CVE-2025-66005. Affected software/component: Polkit authorization checks in versions before v0.69.0, with the note that Polkit authentication is disabled by defau...

8.5CVSS5.8AI score0.00229EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/14 11:55 a.m.•46 views

CVE-2025-14338 Polkit authentication dis isabled by default in inputplumber

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

8.5CVSS0.00229EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/14 11:34 a.m.•45 views

CVE-2025-67859 Polkit Authorization Check can be Bypassed in the TLP power daemon

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS0.00209EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/14 11:34 a.m.•67 views

CVE-2025-67859

The CVE-2025-67859 entry relates to an improper authentication vulnerability in the TLP power daemon (Polkit-related) that allows a local user to arbitrarily change the active power profile and the daemon’s log settings. Affected software is TLP (versions 1.9 before 1.9.1). The issue is categoriz...

5.1CVSS6AI score0.00209EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•6 views

CVE-2025-14338: Improper Access Control

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

8.5CVSS5.8AI score0.00229EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/01/13 2:01 p.m.•10 views

Astra Linux – Vulnerability in Policykit-1

A flaw was discovered in polkit. When processing an XML policy with 32 or more nested elements at depth, an out-of-bounds write vulnerability can be triggered. This issue may lead to a crash or other unexpected behavior, and arbitrary code execution is possible without being detected. To exploit...

6.7CVSS7.2AI score0.00205EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 10:03 a.m.•18 views

CVE-2011-0703

In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...

9.8CVSS8.2AI score0.01267EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•8 views

EulerOS 2.0 SP9 : pam (EulerOS-SA-2026-1016)

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows a...

7.8CVSS7.2AI score0.01053EPSS
SaveExploits13References2
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•15 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000242 advisory. In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship,...

7.8CVSS6.7AI score0.52199EPSS
SaveExploits22References4
GithubExploit
GithubExploit
•added 2026/01/06 1:11 p.m.•376 views

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 A local privilege escalation vulnerability was fou...

7.8CVSS7.5AI score0.94345EPSS
SaveExploits156
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•14 views

PT-2026-28661

Name of the Vulnerable Software and Affected Versions polkit affected versions not specified Description A flaw exists in polkit where a local user can trigger a denial of service. This occurs by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via...

6.7CVSS5.7AI score0.00205EPSS
SaveExploits0References44
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•9 views

Photon OS 5.0: Polkit PHSA-2025-5.0-0673

An update of the polkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0673. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

6.7CVSS6.6AI score0.00205EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/12/19 12:00 a.m.•5 views

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2025-2558)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS6.9AI score0.00205EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/12/19 12:00 a.m.•7 views

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2025-2593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS6.9AI score0.00205EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•7 views

EulerOS Virtualization 2.13.1 : polkit (EulerOS-SA-2025-2558)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

6.7CVSS7.1AI score0.00205EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•11 views

EulerOS Virtualization 2.13.0 : polkit (EulerOS-SA-2025-2593)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

6.7CVSS7.1AI score0.00205EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/12/17 3:21 p.m.•190 views

Exploit for Improper Check for Unusual or Exceptional Conditions in Polkit_Project Polkit

CVE-2021-3560 is an authenticatio...

7.8CVSS7.7AI score0.23708EPSS
SaveExploits38
Rows per page
Query Builder