CVE-2026-15060: Improper Access Control

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

SUSE CVE-2007-0474

Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a "design issue with smb4kkill."...

CVE-2012-6136

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes...

CVE-2018-19640: Insecure Temporary File

If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 e.g. with CVE-2018-19638 he can kill arbitrary processes on the local machine...

PT-2018-3445

Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1 Description: The issue is related to insufficient input validation in the Supportutils package for SUSE Linux. An attacker who can create files in the directory used for collecting log files can...

PT-2018-6801

Name of the Vulnerable Software and Affected Versions: burp versions prior to 2.1.32 Description: The issue allows local users to potentially kill arbitrary processes by modifying the PID file before a root script sends a SIGKILL signal, leveraging access to the burp account. Recommendations: For...

PT-2018-6766

Name of the Vulnerable Software and Affected Versions: collectd versions prior to 5.7.2-r1 Description: The issue allows local users to potentially kill arbitrary processes by modifying PID files, leveraging access to the collectd account before a root script sends a SIGKILL when the service is...

CVE-2017-18226: Incorrect Permission Assignment for Critical Resource

The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM cat...

PT-2018-6753

Name of the Vulnerable Software and Affected Versions: jabberd2 versions prior to 2.6.1 Description: The issue allows local users to potentially kill arbitrary processes by modifying PID files. This is possible because the ownership of /var/run/jabber is set to the jabber account, which can be...

CVE-2017-14681

The daemon in P3Scan 3.0rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for p3scan.pid modification before a root script executes a "kill cat...

CVE-2017-14681

The daemon in P3Scan 3.0rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for p3scan.pid modification before a root script executes a "kill "cat...

PT-2017-13618

Name of the Vulnerable Software and Affected Versions P3Scan versions 3.0 rc1 and earlier Description The issue allows local users to potentially kill arbitrary processes by modifying the p3scan.pid file, which is created after the daemon drops privileges to a non-root account. This can be...

PT-2017-13579

Name of the Vulnerable Software and Affected Versions Bareos versions prior to 16.2.7 Description The issue allows local users to potentially kill arbitrary processes by modifying the PID file, which is created after dropping privileges to a non-root account. This can be exploited when a root...

CVE-2017-14483

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

PT-2017-13482

Name of the Vulnerable Software and Affected Versions Gentoo dev-python/flower package versions prior to 0.9.1-r1 Description The issue allows local users to potentially kill arbitrary processes by modifying the PID file, which has its ownership set to a non-root account. This could be exploited...

CVE-2017-14159: Improper Initialization

slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command, ...

CVE-2017-14102

MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill "cat /pathname"" command, as...

PT-2017-13252

Name of the Vulnerable Software and Affected Versions MIMEDefang versions 2.80 and earlier Description The issue allows local users to potentially kill arbitrary processes by modifying the PID file, which is created after privileges are dropped to a non-root account. This can be exploited before ...

CVE-2017-12847

Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill "cat...

CVE-2017-13649: Improper Initialization

UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command. NOTE: t...