Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Synaesthesia Subscribe
Filtered by product Synaesthesia
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0160 1 Synaesthesia 1 Synaesthesia 2017-10-09 7.2 HIGH N/A
Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.
CVE-2005-0070 1 Synaesthesia 1 Synaesthesia 2008-09-05 7.2 HIGH N/A
Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.