CVE-2024-47856

The RSA Authentication Agent before version 7.4.7 is vulnerable to a path interception issue (CWE-23) affecting service paths and shortcut paths. If a path contains one or more spaces and lacks surrounding quotation marks, an adversary can place a malicious executable in a higher-level directory....

DEBIAN-CVE-2008-1692

Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine...