Approved changes feed: RSS · Atom
cpe:2.3:a:presire:qsnapper:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Presire (919689a6-4e9e-585f-85d0-08d7e4f1269b) |
|---|---|
| Product | Qsnapper (b1a96f43-bc1f-5eef-b0b9-52969436d151) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/presire/qsnapper |
purl2cpe | 2026-07-28 16:41:14.394794 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41049 |
vulnerable | 2026-07-29 00:49:30.885090 |
Caching of Authentication allows Authentication Bypass between users in qSnapper
Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authenticated for them.
Published: 2026-06-22T15:32:59.192Z
Updated: 2026-07-08T05:55:01.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41048 |
vulnerable | 2026-07-29 00:49:30.884836 |
Caching of Authentication allows Authentication Bypass in qSnapper
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".
Published: 2026-06-22T15:31:14.606Z
Updated: 2026-07-07T09:31:37.959Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41047 |
vulnerable | 2026-07-29 00:49:30.884594 |
Information leak via “diff” methods in qSnapper
Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information.
Published: 2026-06-22T15:25:12.478Z
Updated: 2026-06-22T16:24:23.656Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41046 |
vulnerable | 2026-07-29 00:49:30.884335 |
path traversal via `config` parameter in qSnapper
HIGH (7.3)
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.
Published: 2026-06-22T15:20:30.872Z
Updated: 2026-06-22T16:23:53.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41045 |
vulnerable | 2026-07-29 00:49:30.883940 |
Weak polkit authentication check in qSnapper
HIGH (8.1)
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.
Published: 2026-06-22T15:16:37.631Z
Updated: 2026-06-22T16:23:19.149Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.