https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:39:40.408566+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-12795 CVE-2019-12795 2026-10-14T22:39:40.433417+00:00

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)

 https://cve.radiocsirt.org/vuln/usn-4053-1 USN-4053-1 — gvfs vulnerabilities 2026-10-14T22:39:40.433472+00:00

Affected: Ubuntu:16.04:LTS: gvfs, Ubuntu:18.04:LTS: gvfs

It was discovered that GVfs incorrectly handled the admin backend. Files created or moved by the admin backend could end up with the wrong ownership information, contrary to expectations. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-12447, CVE-2019-12448, CVE-2019-12449)

It was discovered that GVfs incorrectly handled authentication on its private D-Bus socket. A local attacker could possibly connect to this socket and issue D-Bus calls. (CVE-2019-12795)