fedoraproject fedora 22 vulnerabilities and exploits

(subscribe to this query)

5.9

CVSSv3

The ssl-proxy-openssl.c function in Dovecot prior to 2.2.17, when SSLv3 is disabled, allow remote malicious users to cause a denial of service (login process crash) via vectors related to handshake failures.

Dovecot Dovecot Fedoraproject Fedora 21 Fedoraproject Fedora 20 Fedoraproject Fedora 22

NA

SQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti prior to 0.8.8d allows remote malicious users to execute arbitrary SQL commands via the graph_template_id parameter to graph_templates.php.

Cacti Cacti Fedoraproject Fedora 24 Fedoraproject Fedora 23 Fedoraproject Fedora 22

NA

Cross-site scripting (XSS) vulnerability in Cacti prior to 0.8.8d allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Cacti Cacti Fedoraproject Fedora 22 Fedoraproject Fedora 24 Fedoraproject Fedora 23

NA

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt prior to 0.4 makes it easier for remote malicious users to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

Mindrot Jbcrypt Fedoraproject Fedora 22 Fedoraproject Fedora 20 Fedoraproject Fedora 21

7.5

CVSSv3

The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows malicious users to bypass intended IP address access restrictions by making an API request with an existing token.

Mediawiki Mediawiki Fedoraproject Fedora 23 Fedoraproject Fedora 21 Fedoraproject Fedora 22

NA

SQL injection vulnerability in Cacti prior to 0.8.8d allows remote malicious users to execute arbitrary SQL commands via unspecified vectors involving a cdef id.

Cacti Cacti Fedoraproject Fedora 24 Fedoraproject Fedora 23 Fedoraproject Fedora 22

NA

Xen 4.5.x and previous versions enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, wh...

Xen Xen Fedoraproject Fedora 22 Fedoraproject Fedora 21 Fedoraproject Fedora 20

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki prior to 3.20150329 allows remote malicious users to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.

Ikiwiki Ikiwiki Fedoraproject Fedora 22 Fedoraproject Fedora 20 Fedoraproject Fedora 21

3.3

CVSSv3

nghttp2 prior to 1.7.1 allows remote malicious users to cause a denial of service (memory exhaustion).

Nghttp2 Nghttp2 Fedoraproject Fedora 22 Fedoraproject Fedora 23

NA

The get_user_grouplist function in the extdom plug-in in FreeIPA prior to 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote malicious users to cause a denial of service (crash) via a group list request for a user that belongs to a large ...

Freeipa Freeipa Fedoraproject Fedora 22 Fedoraproject Fedora 21

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook