Advisories · Weakness
CWE-648.
Every Advisory and CVE whose sources give the weakness CWE-648, newest first.
- CVSS 7.2 High
Privilege escalation in setuid mode via user namespaces in Bubblewrap
- containers bubblewrap
- CWE-648
- CVSS 7.3 High
Red Hat ghostscript: A flaw was found in all ghostscript versions 9.x before 9.50…
- Red Hat ghostscript
- CWE-648
- CVSS 7.3 High
ghostscript: In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its…
- ghostscript
- CWE-648
- CVSS 7.3 High
ghostscript: A flaw was found in all versions of ghostscript 9.x before 9.50…
- ghostscript
- CWE-648
- CVSS 7.3 HighCritical · CVSS 7+ and EPSS
Artifex Software ghostscript: A flaw was found in ghostscript, versions 9.x before 9.50…
- Artifex Software ghostscript
- CWE-648
- CVSS 7.3 High
Artifex Software ghostscript: A flaw was found in, ghostscript versions prior to 9.50…
- Artifex Software ghostscript
- CWE-648
- CVSS 7.3 High
Artifex Software ghostscript: A flaw was found in, ghostscript versions prior to 9.50…
- Artifex Software ghostscript
- CWE-648
-
Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648.
- Fred MODX Revolution
- CWE-648
- CVSS 7.3 High
ghostscript: It was found that in ghostscript some privileged operators remained accessible from…
- ghostscript
- CWE-648
- CVSS 7.3 High
ghostscript: It was found that the superexec operator was available in the internal dictionary in…
- ghostscript
- CWE-648
- CVSS 7.3 High
ghostscript: It was found that the forceput operator could be extracted from the DefineResource method…
- ghostscript
- CWE-648