Veille CVE

Recherche « presire qSnapper »

5 CVE

Critique 0 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « presire qSnapper » ✕
  1. CVE-2026-41049 7.1 Élevée

    presire qSnapper

    Incorrect caching of authentication between different users of the  qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authenticated for them.

  2. CVE-2026-41048 7.1 Élevée

    presire qSnapper

    Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

  3. CVE-2026-41047 5.5 Moyenne

    presire qSnapper

    Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information.

  4. CVE-2026-41046 7.3 Élevée

    presire qSnapper

    A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.

  5. CVE-2026-41045 7.0 Élevée

    presire qSnapper

    A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.