https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:41:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01945 bdu:2019-01945 https://cve.radiocsirt.org/vuln/bdu:2019-01945 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/euvd-2026-243499 EUVD-2026-243499 https://cve.radiocsirt.org/vuln/euvd-2026-243499 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3842 <p>In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the &#34;allow_active&#34; element rather than &#34;allow_any&#34;.</p> <p>In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the &#34;allow_active&#34; element rather than &#34;allow_any&#34;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3842 https://cve.radiocsirt.org/vuln/ghsa-c23j-qp89-q76c <p>In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the &#34;allow_active&#34; element rather than &#34;allow_any&#34;.</p> <p>In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the &#34;allow_active&#34; element rather than &#34;allow_any&#34;.</p> https://cve.radiocsirt.org/vuln/ghsa-c23j-qp89-q76c https://cve.radiocsirt.org/vuln/gsd-2019-3842 gsd-2019-3842 https://cve.radiocsirt.org/vuln/gsd-2019-3842 https://cve.radiocsirt.org/vuln/msrc_cve-2019-3842 msrc_CVE-2019-3842 https://cve.radiocsirt.org/vuln/msrc_cve-2019-3842 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11420-1 <p>libsystemd0-249.4-2.2 on GA media</p> <p>libsystemd0-249.4-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11420-1 https://cve.radiocsirt.org/vuln/rhsa-2021:3900 <p>systemd: Spoofing of XDG_SEAT allows for actions to be checked against &#34;allow_active&#34; instead of &#34;allow_any&#34; systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits</p> <p>systemd: Spoofing of XDG_SEAT allows for actions to be checked against &#34;allow_active&#34; instead of &#34;allow_any&#34; systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3900 https://cve.radiocsirt.org/vuln/suse-su-2019:1265-1 <p>Security update for systemd</p> <p>Security update for systemd</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1265-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3842 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: systemd, Ubuntu:16.04:LTS: systemd, Ubuntu:18.04:LTS: systemd</p> <p>In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the &#34;allow_active&#34; element rather than &#34;allow_any&#34;.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: systemd, Ubuntu:16.04:LTS: systemd, Ubuntu:18.04:LTS: systemd</p> <p>In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the &#34;allow_active&#34; element rather than &#34;allow_any&#34;.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3842 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227