Vulnerabilities

TI-2021-03604 CVE-2021-20315 · GHSA-hpr5-wwh9-pjhf

A locking protection bypass flaw was found in some versions of gnome-shell as shipped…

LOW 27

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00204 Published 2022-02-18 No fix listed CWE-667

TI-2020-04347 CVE-2020-5291

Privilege escalation in setuid mode via user namespaces in Bubblewrap

LOW 36

Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00904 Published 2020-03-31 Fixed in 0.4.1 CWE-648

TI-2017-14568 CVE-2017-1000253 · GHSA-rm92-8pw8-34fm

Linux distributions that have not patched their long-term kernels with…

CRITICAL 93KEV

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10695 Published 2017-10-04 Fixed CWE-119

TI-2011-03661 CVE-2011-4144 · GHSA-rj66-gm55-cmv6

Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5…

LOW 30

Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrat…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.00276 Published 2012-02-02 No fix listed

TI-2007-05990 CVE-2007-6283 · GHSA-xhpj-pmgj-xvwg

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with…

LOW 23

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00405 Published 2007-12-18 Fixed CWE-200