https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:41:43.512980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01945 bdu:2019-01945 2026-10-02T19:41:43.898548+00:00 bdu:2019-01945 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:41:43.898594+00:00 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/euvd-2026-243499 EUVD-2026-243499 2026-10-02T19:41:43.898615+00:00 EUVD-2026-243499 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3842 fkie_cve-2019-3842 2026-10-02T19:41:43.898627+00:00

In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".

 https://cve.radiocsirt.org/vuln/ghsa-c23j-qp89-q76c GHSA-c23j-qp89-q76c 2026-10-02T19:41:43.898675+00:00

In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".

 https://cve.radiocsirt.org/vuln/gsd-2019-3842 gsd-2019-3842 2026-10-02T19:41:43.898693+00:00 gsd-2019-3842 https://cve.radiocsirt.org/vuln/msrc_cve-2019-3842 msrc_CVE-2019-3842 — In systemd before v242-rc4 it was discovered that pam_systemd does not properly sanitize the environment before using t… 2026-10-02T19:41:43.898704+00:00 msrc_CVE-2019-3842 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11420-1 openSUSE-SU-2024:11420-1 — libsystemd0-249.4-2.2 on GA media 2026-10-02T19:41:43.898721+00:00

libsystemd0-249.4-2.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:3900 RHSA-2021:3900 — Red Hat Security Advisory: systemd security update 2026-10-02T19:41:43.898748+00:00

systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits

 https://cve.radiocsirt.org/vuln/suse-su-2019:1265-1 SUSE-SU-2019:1265-1 — Security update for systemd 2026-10-02T19:41:43.898770+00:00

Security update for systemd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3842 UBUNTU-CVE-2019-3842 2026-10-02T19:41:43.898786+00:00

Affected: Ubuntu:14.04:LTS: systemd, Ubuntu:16.04:LTS: systemd, Ubuntu:18.04:LTS: systemd

In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen 2026-10-02T19:41:43.898810+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.