Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2025-32463

sudo: LPE via chroot option

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

CVSS 3.1 · 9.3 Critical EPSS 56.3% KEV · Listed
Vendors
Canonical Debian Opensuse and 3 more
Products
Ubuntu Linux Debian Linux Leap and 5 more
CVE-2024-46956

ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Artifex Debian Redhat and 1 more
Products
Ghostscript Debian Linux Enterprise Linux and 3 more
CVE-2024-46953

ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Artifex Debian Redhat and 1 more
Products
Ghostscript Debian Linux Enterprise Linux and 3 more
CVE-2024-46951

ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Artifex Debian Redhat and 1 more
Products
Ghostscript Debian Linux Enterprise Linux and 3 more
CVE-2017-5898

Qemu: usb: integer overflow in emulated_apdu_from_guest

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat Suse
Products
Qemu Enterprise Linux Linux Enterprise Desktop and 3 more