Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fedoraproject fedora 27 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2022-3602
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue...
Openssl OpensslFedoraproject Fedora 36Fedoraproject Fedora 37Netapp Clustered Data Ontap -Fedoraproject Fedora 26Fedoraproject Fedora 27Nodejs Node.js 19.0.0Nodejs Node.js 18.12.0Nodejs Node.js
3.3
CVSSv3
CVE-2021-3574
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
Imagemagick Imagemagick 7.0.11-5Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
7.8
CVSSv3
CVE-2022-32545
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to...
Imagemagick ImagemagickRedhat Enterprise Linux 7.0Fedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 36
7.8
CVSSv3
CVE-2022-32546
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to...
Imagemagick ImagemagickRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Fedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 36
7.8
CVSSv3
CVE-2022-32547
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes ...
Imagemagick ImagemagickRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Fedoraproject Fedora 36
9.8
CVSSv3
CVE-2019-10196
A flaw was found in http-proxy-agent, prior to version 2.1.0. It exists http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure throug...
Http-proxy-agent Project Http-proxy-agentFedoraproject Fedora 27Redhat Software Collections -Redhat Enterprise Linux 7.0
5.5
CVSSv3
CVE-2019-19451
When GNOME Dia prior to 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to di...
Gnome DiaFedoraproject Fedora 32Fedoraproject Fedora 33Opensuse Leap 15.1
9.8
CVSSv3
CVE-2019-16942
A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, a...
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Jboss Enterprise Application Platform 7.2.0Redhat Jboss Enterprise Application Platform 7.3Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Netapp Active Iq Unified ManagerOracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Banking Platform 2.4.1Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Database Server 12.2.0.1
9.8
CVSSv3
CVE-2019-16943
A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an...
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Banking Platform 2.4.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.1Oracle Primavera Gateway 16.2Oracle Banking Platform 2.5.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Jd Edwards Enterpriseone Orchestrator 9.2Oracle Banking Platform 2.6.0Oracle Banking Platform 2.6.1Oracle Banking Platform 2.6.2Oracle Weblogic Server 12.2.1.4.0
9.8
CVSSv3
CVE-2019-16928
Exim 4.92 up to and including 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
Exim EximCanonical Ubuntu Linux 19.04Debian Debian Linux 10.0Fedoraproject Fedora 29Fedoraproject Fedora 30Fedoraproject Fedora 31
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook