debian/zhcon vulnerabilities

Latest debian/zhcon CVEs

Newest publication first

1. CVE-2005-0072 zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.

   Published 2005-01-29

   Low·CVSS 2.1 EPSS 0.47%

   zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.

2. DSA-655-1 zhcon - missing privilege release

   Published 2005-01-25

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.