Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fedora core vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2022-2068
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not dis...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Siemens Sinec Ins 1.0Siemens Sinec InsNetapp Santricity Smi-s Provider -Netapp Element Software -Netapp Ontap Select Deploy Administration Utility -Netapp Smi-s Provider -Netapp Solidfire -Netapp Hci Management Node -Netapp Snapmanager -Netapp Ontap Antivirus Connector -Netapp Bootstrap Os -Netapp H615c Firmware -Netapp H610s Firmware -Netapp H610c Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -
10
CVSSv2
CVE-2022-1292
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Snapmanager -Netapp A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -
10
CVSSv2
CVE-2020-1747
A vulnerability exists in the PyYAML library in versions prior to 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted i...
Pyyaml PyyamlFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Opensuse Leap 15.1Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0
10
CVSSv2
CVE-2009-0065
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel prior to 2.6.28-git8 allows remote malicious users to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.26.5Linux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux KernelLinux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.22.1Linux Linux Kernel 2.6.23.16
10
CVSSv2
CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x prior to 1.4.6, 2.x prior to 2.0.2, and 1.9.0 up to and including 1.9.95 allows malicious users to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated...
Gnu Privacy Guard 1.3.4Gnu Privacy Guard 1.4Gnu Privacy Guard 1.4.1Gnu Privacy Guard 1.9.10Gnu Privacy Guard 1.9.15Gnu Privacy Guard 1.2.7Gnu Privacy Guard 1.3.3Gnu Privacy Guard 1.4.4Gnu Privacy Guard 1.4.5Gnu Privacy Guard 1.2.4Gnu Privacy Guard 1.4.2Gnu Privacy Guard 1.4.2.1Gnu Privacy Guard 1.9.20Gnu Privacy Guard 2.0Gnu Privacy Guard 1.2.5Gnu Privacy Guard 1.2.6Gnu Privacy Guard 1.4.2.2Gnu Privacy Guard 1.4.3Gnu Privacy Guard 2.0.1Gpg4win Gpg4win 1.0.7Redhat Enterprise Linux 4.0Ubuntu Ubuntu Linux 5.10
10
CVSSv2
CVE-2006-3742
The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows malicious users to login without a password by attempting to log in multiple times.
Kde Kdebase 3.5.4 0.4.fc5
10
CVSSv2
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, a...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorKde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Easy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0
10
CVSSv2
CVE-2004-0989
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote malicious users to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data...
Xmlsoft Libxml 1.8.17Xmlsoft Libxml2 2.5.11Xmlsoft Libxml2 2.6.9Xmlstarlet Command Line Xml Toolkit 0.9.1Xmlsoft Libxml2 2.6.11Xmlsoft Libxml2 2.6.12Xmlsoft Libxml2 2.6.13Xmlsoft Libxml2 2.6.14Xmlsoft Libxml2 2.6.6Xmlsoft Libxml2 2.6.7Xmlsoft Libxml2 2.6.8Redhat Fedora Core Core 2.0Trustix Secure Linux 2.0Trustix Secure Linux 2.1Ubuntu Ubuntu Linux 4.1
10
CVSSv2
CVE-2004-0882
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x up to and including 3.0.7 may allow remote malicious users to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
Samba Samba 3.0.0Samba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 3.0.1Samba Samba 3.0.2Samba Samba 3.0.7Conectiva Linux 10.0Samba Samba 3.0.4Redhat Enterprise Linux 2.1Redhat Fedora Core Core 3.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux 3.0Ubuntu Ubuntu Linux 4.1Redhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 2.0
10
CVSSv2
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identifi...
Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.12Easy Software Products Cups 1.1.19Easy Software Products Cups 1.1.19 Rc5Gnome Gpdf 0.112Gnome Gpdf 0.131Kde Koffice 1.3 Beta3Kde Kpdf 3.2Pdftohtml Pdftohtml 0.36Tetex Tetex 1.0.7Xpdf Xpdf 1.0Xpdf Xpdf 1.0aEasy Software Products Cups 1.0.4Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3.2Kde Koffice 1.3.3Pdftohtml Pdftohtml 0.33Pdftohtml Pdftohtml 0.33aTetex Tetex 2.0.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook