Vulnerabilities > Packagekit Project > Packagekit > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-11-27 CVE-2011-2515 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.
local
low complexity
packagekit-project debian redhat CWE-732
5.3
5.3
2018-04-23 CVE-2018-1106 Improper Authentication vulnerability in multiple products
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. 		5.5
5.5