Advisories · Weakness
CWE-403.
Every Advisory and CVE whose sources give the weakness CWE-403, newest first.
- CVSS 4.3 Medium
When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues.
- Open-Xchange GmbH OX Dovecot Pro
- Open-Xchange GmbH OX Dovecot CE
- CWE-403
- CVSS 8.8 High
Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-403
- CVSS 9.6 CriticalCritical · CVSS 9+
Sandbox escape in the Security: Process Sandboxing component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-403
- CWE-693
- CVSS 9.3 CriticalCritical · CVSS 9+
Pachno 1.0.6 Wiki TextParser XML External Entity Injection
- Pachno
- CWE-403
- CVSS 9.3 CriticalCritical · CVSS 9+
Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability
- Ksenia Security S.p.A. lares
- CWE-403
- CVSS 8.6 High
CMSimple 5.15 Remote Command Execution via Extensions Configuration
- CMSimple
- CWE-403
- CVSS 7.4 High
Leaking file descriptors from the fork server
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-403
- CVSS 8.6 HighCritical · CVSS 7+ and EPSS
runc vulnerable to container breakout through process.cwd trickery and leaked fds
- Information disclosure
- CWE-403
>=1.0.0-rc93, <1.1.12 · fixed in 1.1.12
GHSA-xr7r-f8xq-vfvv · CVE-2024-21626