blueman project records
2 published records for vendor blueman project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 50%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2015-8612Weaponized | The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges blueman project · blueman · CWE-264 | High8.4 | — | 6.3% | Jan 8, 2016 |
29Monitor | CVE-2020-15238Proof of concept | Local privilege escalation Bluemanblueman project · blueman · CWE-74 | High7.0 | — | 4.5% | Oct 27, 2020 |
- CVE-2015-861240Plan
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges
HighCVSS 8.4WeaponizedEPSS 6%blueman project · bluemanJan 8, 2016
- CVE-2020-1523829Monitor
Local privilege escalation Blueman
HighCVSS 7.0Proof of conceptEPSS 4%blueman project · bluemanOct 27, 2020