31 matches found
CVE-2026-40225: Incorrect Resource Transfer Between Spheres
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output...
systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output
A flaw was found in udev in systemd. A local user with access to malicious hardware devices can exploit this vulnerability. By providing unsanitized kernel output, the flaw allows for local root execution, leading to privilege escalation...
OPENSUSE-SU-2026:20471-1 Security update for systemd
This update for systemd fixes the following issues: Update to systemd v257.13: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method bsc1259650. - CVE-2026-29111: local unprivileged user can trigger an assert in systemd bsc1259418. -...
PT-2026-31934
Name of the Vulnerable Software and Affected Versions systemd versions prior to 260 Description In udev, local root execution can occur through the use of malicious hardware devices and unsanitized kernel output. Recommendations Update to version 260 or later...
CVE-2013-4717
Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...
CVE-2013-4717
Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...
CVE-2013-4717
Removed by vendor...
CVE-2013-4717: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...
CVE-2019-9751: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Open Ticket Request System OTRS 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. This is related to Kernel/Output/Template/Document.pm...
PT-2013-1329
Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS Help Desk versions 3.0.x through 3.0.21 Open Ticket Request System OTRS Help Desk versions 3.1.x through 3.1.17 Open Ticket Request System OTRS Help Desk versions 3.2.x through 3.2.8 Description The issue is...