55 matches found
EUVD-2026-120402
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled...
UBUNTU-CVE-2026-84410
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled...
CVE-2026-84410
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled...
CVE-2026-84410
In apport versions prior to 2.37.0 , an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges . The issue exists because the automatic crash report processing pipeline runs as root and executes the ldd command on the ExecutablePath field of a cr...
CVE-2026-84410 apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processing
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled...
CVE-2026-84410 apport: Local privilege escalation to root via ldd execution on an attacker-controlled ExecutablePath in automatic crash report processing
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled...
PT-2026-141107
Name of the Vulnerable Software and Affected Versions apport versions prior to 2.37.0 Description Improper privilege management allows an unprivileged local attacker to gain root privileges on systems with automatic crash reporting enabled. The crash report processing pipeline runs as root and...
EUVD-1999-0400
Malware in sbrugna...
EUVD-2024-52412
Malicious code in bioql PyPI...
CVE-1999-0400
Denial of service in Linux 2.2.0 running the ldd command on a core file...
CVE-2024-54288
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...
CVE-2024-12540
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-54288. Reason: This candidate is a reservation duplicate of CVE-2024-54288. Notes: All CVE users should reference CVE-2024-54288 instead of this candidate. All references and descriptions in this candidate have been...
CVE-2024-12540
CVE-2024-12540 is rejected; this candidate is a reservation duplicate of CVE-2024-54288 and not in use.
PT-2025-1890 · WordPress · Ldd Directory Lite
Name of the Vulnerable Software and Affected Versions: LDD Directory Lite plugin for WordPress versions prior to 3.4 Description: The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the URL. This allows unauthenticated attacker...
CVE-2024-54288
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...
CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through 3.3...
CVE-2024-54288
CVE-2024-54288 affects the WordPress plugin “LDD Directory Lite” up to version 3.3 (names/versions vary in sources). The issue is an Improper Neutralization of Input During Web Page Generation (XSS) leading to a reflected XSS vulnerability. The root cause is insufficient input handling in web pag...
CVE-2024-54288 WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LDD Web Design LDD Directory Lite ldd-directory-lite allows Reflected XSS.This issue affects LDD Directory Lite: from n/a through = 3.3...