Vulnerabilities > Replaysorcery Project > Replaysorcery

DATE CVE VULNERABILITY TITLE RISK
2021-07-30 CVE-2021-36983 Link Following vulnerability in Replaysorcery Project Replaysorcery 0.6.0
replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.
local
low complexity
replaysorcery-project CWE-59
7.2
2021-02-10 CVE-2021-26936 Improper Privilege Management vulnerability in Replaysorcery Project Replaysorcery
The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations.
local
low complexity
replaysorcery-project CWE-269
7.2