Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-14338

Polkit authentication dis isabled by default in inputplumber

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Shadowblip
Products
Inputplumber
CVE-2025-66005

Lack of Authentication in the InputManager D-Bus interface

Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Shadowblip
Products
Inputplumber