https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-3684.htmlhttps://patchthecve.com/cve/CVE-2014-3684.htmlWed, 17 Jun 2026 00:08:44 +0000MEDIUM 6.8: The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary prochttps://patchthecve.com/cve/CVE-2014-0749.htmlhttps://patchthecve.com/cve/CVE-2014-0749.htmlWed, 17 Jun 2026 00:03:34 +0000HIGH 10.0: Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value.https://patchthecve.com/cve/CVE-2013-4495.htmlhttps://patchthecve.com/cve/CVE-2013-4495.htmlTue, 16 Jun 2026 23:57:19 +0000HIGH 10.0: The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.https://patchthecve.com/cve/CVE-2013-4319.htmlhttps://patchthecve.com/cve/CVE-2013-4319.htmlTue, 16 Jun 2026 23:57:01 +0000HIGH 9.0: pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.https://patchthecve.com/cve/CVE-2011-4925.htmlhttps://patchthecve.com/cve/CVE-2011-4925.htmlTue, 16 Jun 2026 23:35:38 +0000MEDIUM 4.9: Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.https://patchthecve.com/cve/CVE-2011-2907.htmlhttps://patchthecve.com/cve/CVE-2011-2907.htmlTue, 16 Jun 2026 23:32:13 +0000HIGH 7.5: Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.