Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fedoraproject fedora 18 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2013-5610
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 26.0 and SeaMonkey prior to 2.23 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla FirefoxMozilla SeamonkeyOracle Solaris 11.3Fedoraproject Fedora 18Fedoraproject Fedora 19Fedoraproject Fedora 20Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 13.10Opensuse Opensuse 12.2Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 11
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
9.3
CVSSv2
CVE-2021-3973
vim is vulnerable to Heap-based Buffer Overflow
Vim VimFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0
9.3
CVSSv2
CVE-2012-6075
Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote malicious users to cause a denial of service (guest OS crash) and possibly execute arbitrary guest co...
Qemu QemuFedoraproject Fedora 17Fedoraproject Fedora 16Fedoraproject Fedora 18Suse Linux Enterprise Server 11Opensuse Opensuse 12.2Opensuse Opensuse 12.1Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Server Aus 6.4Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server Aus 5.9Redhat Enterprise Linux Eus 5.9Redhat Enterprise Linux Eus 6.4Redhat Virtualization 3.0Debian Debian Linux 6.0Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04
8.5
CVSSv2
CVE-2021-44832
Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...
Apache Log4j 2.0Apache Log4jOracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Weblogic Server 12.2.1.4.0Oracle Primavera Unifier 19.12Oracle Weblogic Server 14.1.1.0.0Oracle Primavera Unifier 20.12Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Primavera GatewayOracle Retail Assortment Planning 16.0.3Oracle Primavera Unifier 21.12Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera Gateway 21.12.0Oracle Retail Fiscal Management 14.2Oracle Siebel Ui Framework 21.12Oracle Communications Diameter Signaling RouterCisco Cloudcenter 4.10.0.16Fedoraproject Fedora 34Fedoraproject Fedora 35
8.5
CVSSv2
CVE-2021-3968
vim is vulnerable to Heap-based Buffer Overflow
Vim VimFedoraproject Fedora 34Fedoraproject Fedora 35
7.8
CVSSv2
CVE-2012-5645
A denial of service flaw was found in the way the server component of Freeciv prior to 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.
Freeciv FreecivFedoraproject Fedora 16Fedoraproject Fedora 17Fedoraproject Fedora 18
7.8
CVSSv2
CVE-2019-9515
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame ...
Apple SwiftnioApache Traffic ServerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 9.0Debian Debian Linux 10.0Synology Skynas -Synology Diskstation Manager 6.2Synology Vs960hd Firmware -Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.0Opensuse Leap 15.1Redhat Software Collections 1.0Redhat Jboss Core Services 1.0Redhat Enterprise Linux 8.0Redhat Jboss Enterprise Application Platform 7.2.0Redhat Single Sign-on 7.3Redhat Openshift Container Platform 4.1Redhat Quay 3.0.0Redhat Openshift Service Mesh 1.0
7.8
CVSSv2
CVE-2019-9511
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and...
Apple SwiftnioApache Traffic ServerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 9.0Debian Debian Linux 10.0Synology Skynas -Synology Diskstation Manager 6.2Synology Vs960hd Firmware -Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.0Opensuse Leap 15.1Redhat Software Collections 1.0Redhat Jboss Core Services 1.0Redhat Enterprise Linux 8.0Redhat Jboss Enterprise Application Platform 7.2.0Redhat Quay 3.0.0Redhat Openshift Service Mesh 1.0Redhat Jboss Enterprise Application Platform 7.3.0Oracle Graalvm 19.2.0
7.8
CVSSv2
CVE-2019-9514
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer...
Apple SwiftnioApache Traffic ServerDebian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 9.0Synology Skynas -Synology Diskstation Manager 6.2Synology Vs960hd Firmware -Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.0Opensuse Leap 15.1Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Software Collections 1.0Redhat Openshift Container Platform 3.9Redhat Openshift Container Platform 3.11Redhat Openshift Container Platform 3.10Redhat Jboss Core Services 1.0Redhat Enterprise Linux 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook