Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

packagekit project packagekit - vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2013-1764
The Zypper (aka zypp) backend in PackageKit prior to 0.8.8 allows local users to downgrade packages via the "install updates" method.
Packagekit Project PackagekitPackagekit Project Packagekit 0.8.6Packagekit Project Packagekit 0.8.5Packagekit Project Packagekit 0.8.4Packagekit Project Packagekit 0.8.3Packagekit Project Packagekit 0.8.1Packagekit Project Packagekit 0.8.2
2.1
CVSSv2
CVE-2020-16121
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
Packagekit Project Packagekit -Canonical Ubuntu Linux 20.04
2.1
CVSSv2
CVE-2022-0987
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.
Packagekit Project PackagekitRedhat Enterprise Linux 9.0
NA
CVE-2024-0217
A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other al...
Packagekit Project PackagekitRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 39
2.1
CVSSv2
CVE-2020-16122
PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.
Packagekit Project Packagekit -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04
4.6
CVSSv2
CVE-2011-2515
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.
Packagekit Project Packagekit 0.6.17Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Enterprise Linux Server 6.0
1.9
CVSSv2
CVE-2013-0200
HP Linux Imaging and Printing (HPLIP) up to and including 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out t...
Hp Linux Imaging And Printing Project 3.9.6Hp Linux Imaging And Printing Project 3.10.6Hp Linux Imaging And Printing Project 3.11.1Hp Linux Imaging And Printing Project 3.11.3aHp Linux Imaging And Printing Project 3.9.4bHp Linux Imaging And Printing Project 3.9.12Hp Linux Imaging And Printing Project 1.0Hp Linux Imaging And Printing Project 2.7.10Hp Linux Imaging And Printing Project 2.0Hp Linux Imaging And Printing Project 3.9.4Hp Linux Imaging And Printing Project 3.9.10Hp Linux Imaging And Printing Project 3.10.9Hp Linux Imaging And Printing Project 3.9.8Hp Linux Imaging And Printing Project 3.10.5Hp Linux Imaging And Printing ProjectHp Linux Imaging And Printing Project 3.11.3Hp Linux Imaging And Printing Project 3.11.5Hp Linux Imaging And Printing Project 3.11.10Hp Linux Imaging And Printing Project 3.9.2Hp Linux Imaging And Printing Project 3.10.2Hp Linux Imaging And Printing Project 3.11.7Redhat Enterprise Linux 6.0
2.1
CVSSv2
CVE-2013-6402
base/pkit.py in HP Linux Imaging and Printing (HPLIP) up to and including 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
Hp Linux Imaging And Printing ProjectHp Linux Imaging And Printing Project 3.11.3aHp Linux Imaging And Printing Project 3.13.5Hp Linux Imaging And Printing Project 3.13.4Hp Linux Imaging And Printing Project 3.12.6Hp Linux Imaging And Printing Project 3.12.4Hp Linux Imaging And Printing Project 3.11.1Hp Linux Imaging And Printing Project 3.10.9Hp Linux Imaging And Printing Project 3.9.6Hp Linux Imaging And Printing Project 3.9.4Hp Linux Imaging And Printing Project 3.13.8Hp Linux Imaging And Printing Project 3.9.4bHp Linux Imaging And Printing Project 3.13.3Hp Linux Imaging And Printing Project 3.13.2Hp Linux Imaging And Printing Project 3.12.2Hp Linux Imaging And Printing Project 3.11.12Hp Linux Imaging And Printing Project 3.11.10Hp Linux Imaging And Printing Project 3.10.6Hp Linux Imaging And Printing Project 3.10.5Hp Linux Imaging And Printing Project 3.9.2Hp Linux Imaging And Printing Project 3.13.10Hp Linux Imaging And Printing Project 3.13.9
6.8
CVSSv2
CVE-2013-6427
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x up to and including 3.13.11 launches a program from an http URL, which allows man-in-the-middle malicious users to execute arbitrary code by gaining control over the client-server data stream.
Hp Linux Imaging And Printing Project 3.11.3aHp Linux Imaging And Printing Project 3.13.5Hp Linux Imaging And Printing Project 3.13.4Hp Linux Imaging And Printing Project 3.12.4Hp Linux Imaging And Printing Project 3.12.2Hp Linux Imaging And Printing Project 3.11.1Hp Linux Imaging And Printing Project 3.10.9Hp Linux Imaging And Printing Project 3.9.6Hp Linux Imaging And Printing Project 3.9.4Hp Linux Imaging And Printing Project 3.13.8Hp Linux Imaging And Printing Project 3.9.4bHp Linux Imaging And Printing Project 3.13.3Hp Linux Imaging And Printing Project 3.13.2Hp Linux Imaging And Printing Project 3.11.12Hp Linux Imaging And Printing Project 3.11.10Hp Linux Imaging And Printing Project 3.10.6Hp Linux Imaging And Printing Project 3.10.5Hp Linux Imaging And Printing Project 3.9.2Hp Linux Imaging And Printing Project 3.13.7Hp Linux Imaging And Printing Project 3.13.6Hp Linux Imaging And Printing Project 3.12.10Hp Linux Imaging And Printing Project 3.12.9
9.3
CVSSv2
CVE-2010-1208
Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x prior to 3.5.11 and 3.6.x prior to 3.6.7, and SeaMonkey prior to 2.0.6, allows remote malicious users to execute arbitrary code via vectors related to deletion o...
Mozilla FirefoxMozilla Seamonkey
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook