https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:30:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-04021 cnvd-2015-04021 https://cve.radiocsirt.org/vuln/cnvd-2015-04021 https://cve.radiocsirt.org/vuln/euvd-2026-91628 EUVD-2026-91628 https://cve.radiocsirt.org/vuln/euvd-2026-91628 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3142 <p>The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.</p> <p>The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3142 https://cve.radiocsirt.org/vuln/ghsa-fpvf-mw5r-q2rm <p>The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.</p> <p>The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.</p> https://cve.radiocsirt.org/vuln/ghsa-fpvf-mw5r-q2rm https://cve.radiocsirt.org/vuln/gsd-2015-3142 gsd-2015-3142 https://cve.radiocsirt.org/vuln/gsd-2015-3142 https://cve.radiocsirt.org/vuln/rhsa-2015:1083 <p>abrt: default event scripts follow symbolic links abrt: default abrt event scripts lead to information disclosure abrt: abrt-hook-ccpp writes core dumps to existing files owned by others abrt: does not validate contents of uploaded problem reports abrt: abrt-dbus does not guard against crafted problem directory path arguments abrt: directory traversals in several D-Bus methods implemented by abrt-dbus abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache abrt: Various race-conditions and symlink issues found in abrt</p> <p>abrt: default event scripts follow symbolic links abrt: default abrt event scripts lead to information disclosure abrt: abrt-hook-ccpp writes core dumps to existing files owned by others abrt: does not validate contents of uploaded problem reports abrt: abrt-dbus does not guard against crafted problem directory path arguments abrt: directory traversals in several D-Bus methods implemented by abrt-dbus abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache abrt: Various race-conditions and symlink issues found in abrt</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1083 https://cve.radiocsirt.org/vuln/rhsa-2015:1210 <p>abrt: default event scripts follow symbolic links abrt: default abrt event scripts lead to information disclosure abrt: abrt-hook-ccpp writes core dumps to existing files owned by others abrt: does not validate contents of uploaded problem reports abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache abrt: Various race-conditions and symlink issues found in abrt</p> <p>abrt: default event scripts follow symbolic links abrt: default abrt event scripts lead to information disclosure abrt: abrt-hook-ccpp writes core dumps to existing files owned by others abrt: does not validate contents of uploaded problem reports abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache abrt: Various race-conditions and symlink issues found in abrt</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1210