Qualys
6 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
33Monitor | CVE-2024-48992No exploit | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intneedrestart project · needrestart · CWE-427 | High7.8 | — | 7.9% | Nov 19, 2024 |
33Monitor | CVE-2024-48991No exploit | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race conditionneedrestart project · needrestart · CWE-362 | High7.8 | — | 6.0% | Nov 19, 2024 |
40Plan | CVE-2024-48990Weaponized | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart intneedrestart project · needrestart · CWE-427 | High7.8 | — | 21.2% | Nov 19, 2024 |
35Monitor | CVE-2024-11003Proof of concept | Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input.needrestart project · needrestart · CWE-78 | High7.8 | — | 12.0% | Nov 19, 2024 |
34Monitor | CVE-2024-10224No exploit | Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possiblyrschupp · modules\ · CWE-78 | High7.8 | — | 8.9% | Nov 19, 2024 |
28Monitor | CVE-2022-3328Proof of concept | Race condition in snap-confine's must_mkdir_and_open_with_perms()canonical · snapd · CWE-362 | High7.0 | — | 0.3% | Jan 8, 2024 |
- CVE-2024-4899233Monitor
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart int
HighCVSS 7.8No exploitEPSS 7%needrestart project · needrestartNov 19, 2024
- CVE-2024-4899133Monitor
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition
HighCVSS 7.8No exploitEPSS 6%needrestart project · needrestartNov 19, 2024
- CVE-2024-4899040Plan
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart int
HighCVSS 7.8WeaponizedEPSS 21%needrestart project · needrestartNov 19, 2024
- CVE-2024-1100335Monitor
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input.
HighCVSS 7.8Proof of conceptEPSS 12%needrestart project · needrestartNov 19, 2024
- CVE-2024-1022434Monitor
Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly
HighCVSS 7.8No exploitEPSS 8%rschupp · modules\Nov 19, 2024
- CVE-2022-332828Monitor
Race condition in snap-confine's must_mkdir_and_open_with_perms()
HighCVSS 7.0Proof of conceptEPSS 0%canonical · snapdJan 8, 2024