Vulnerabilities > Replaysorcery Project
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-07-30 | CVE-2021-36983 | Link Following vulnerability in Replaysorcery Project Replaysorcery 0.6.0 replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock. | 7.2 |
2021-02-10 | CVE-2021-26936 | Improper Privilege Management vulnerability in Replaysorcery Project Replaysorcery The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations. | 7.2 |