Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fedoraproject fedora core 4 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2022-24407
In Cyrus SASL 2.1.17 up to and including 2.1.27 prior to 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
Cyrusimap Cyrus-saslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.2.0
NA
CVE-2022-42916
In curl prior to 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be byp...
Haxx CurlFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Apple MacosSplunk Universal Forwarder 9.1.0Splunk Universal Forwarder
5
CVSSv2
CVE-2021-33560
Libgcrypt prior to 1.8.8 and 1.9.x prior to 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.
Gnupg LibgcryptDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Communications Cloud Native Core Network Repository Function 1.14.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.9.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0
2.6
CVSSv2
CVE-2021-22898
curl 7.7 up to and including 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, l...
Haxx CurlDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Siemens Sinec Infrastructure Network ServicesSplunk Universal Forwarder 9.1.0Splunk Universal Forwarder
2.7
CVSSv2
CVE-2021-3426
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would ...
Python PythonPython Python 3.10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Redhat Enterprise Linux 8.0Redhat Software Collections -Netapp Cloud Backup -Netapp Snapcenter -Netapp Ontap Select Deploy Administration Utility -Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Cloud Native Core Binding Support Function 1.10.0
NA
CVE-2022-42915
curl prior to 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HTTP proxy might ref...
Haxx CurlFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp Ontap 9 -Apple MacosSplunk Universal Forwarder 9.1.0Splunk Universal Forwarder
4
CVSSv2
CVE-2021-37750
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) prior to 1.18.5 and 1.19.x prior to 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
Mit Kerberos 5Fedoraproject Fedora 33Debian Debian Linux 9.0Starwindsoftware Starwind Virtual San V8r13Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0
5
CVSSv2
CVE-2021-38604
In librt in the GNU C Library (aka glibc) up to and including 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.
Gnu GlibcFedoraproject Fedora 35Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Enterprise Operations Monitor 4.3Oracle Enterprise Operations Monitor 4.4Oracle Enterprise Operations Monitor 5.0Oracle Communications Cloud Native Core Unified Data Repository 22.2.0
4.3
CVSSv2
CVE-2021-33829
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 up to and including 4.16.x prior to 4.16.1 allows remote malicious users to inject executable JavaScript code through a crafted comment because --!> is mishandled.
Ckeditor CkeditorFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Drupal DrupalDebian Debian Linux 9.0
5
CVSSv2
CVE-2005-2970
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote malicious users to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Apache Http ServerCanonical Ubuntu Linux 4.10Canonical Ubuntu Linux 5.04Canonical Ubuntu Linux 5.10Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Fedoraproject Fedora Core 4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook