62 matches found
Important: systemd
Issue Overview: systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user CVE-2026-16742 Affected Packages: systemd Issue Correction: Run dnf update systemd --releasever 2023.12.20260928 or dnf update --advisory...
Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2026-3117)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3117 advisory. systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user CVE-2026-16742 Tenable has extracted the preceding description bloc...
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
PT-2026-69840
Name of the Vulnerable Software and Affected Versions systemd-homed affected versions not specified Description The systemd-homed daemon contains a local privilege escalation flaw resulting from insecure privilege management. An attacker can exploit this issue by adding an arbitrary system group ...
CVE-2026-16742: Improper Privilege Management
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CVE-2026-16742: Improper Privilege Management
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
CUPS: Local denial-of-service via cupsd.conf update and related issues
A flaw was found in cups. A user in group defined by SystemGroup directive in /etc/cups/cups-files.conf can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write...
EUVD-2010-3404
Malware in sbrugna...
EUVD-2010-3403
Malware in sbrugna...
PT-2025-46636
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel driver for mailbox communication on ZynqMP-IPI systems had an issue where it incorrectly identified SGI System Group Interrupt versus SPI System Peripheral Interrupt...
CVE-2024-6523
A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input leads to cross site scripting. It is possible to launch the attack...
CVE-2024-6523
A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input alert'XSS' leads to cross site scripting. It is possible to launch the...
PT-2024-37688
Name of the Vulnerable Software and Affected Versions ZKTeco BioTime versions up to 9.5.2 Description A vulnerability was found in the system-group-add Handler component. The manipulation of the user argument with malicious input, such as alert'XSS', leads to cross-site scripting. This issue can ...
ZKTeco BioTime Security Breach
ZKTeco BioTime is a powerful web-based time and attendance management software from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco BioTime version 9.5.2 and earlier versions, which is caused by a cross-site scripting vulnerability in the user parameter of system-group-add...
CVE-2024-6523: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the component system-group-add Handler. The manipulation of the argument user with the input leads to cross site scripting. It is possible to launch the attack...
Desdev DedeCMS Cross-Site Request Forgery Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
SUSE CVE-2023-52643
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix memleak in iiodeviceregistersysfs When iiodeviceregistersysfsgroup fails, we should free iiodevopaque-chanattrgroup.attrs to prevent potential memleak...