fedoraproject extra packages for enterprise linux 7.0 vulnerabilities and exploits

(subscribe to this query)

9.1

A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle's inbuilt cURL helper, which resulted in a blind SSRF risk. An...

Moodle Moodle Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Extra Packages For Enterprise Linux 7.0 Fedoraproject Fedora 371 Github repository available

7.8

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c....

Libmodbus Libmodbus Fedoraproject Fedora 35 Fedoraproject Extra Packages For Enterprise Linux 7.0 Debian Debian Linux 10.01 Github repository available

3.2

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service....

Qemu Qemu 6.1.50 Fedoraproject Fedora 33 Fedoraproject Extra Packages For Enterprise Linux 7.0 Fedoraproject Fedora 37 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 8.0 Redhat Openstack Platform 13.0 Redhat Openstack Platform 10.0 Redhat Enterprise Linux 9.01 Github repository available

7.8

CVSSv3

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related...

Imagemagick Imagemagick Redhat Enterprise Linux 7.0 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 36

7.8

CVSSv3

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related...

Imagemagick Imagemagick Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 36

7.5

CVSSv3

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input....

Golang Go Fedoraproject Fedora 34 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Extra Packages For Enterprise Linux 7.02 Github repositories available

8.8

CVSSv3

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default....

Moodle Moodle Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Extra Packages For Enterprise Linux 7.0

7.5

CVSSv3

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs....

Keepass Keepass 2.48 Fedoraproject Fedora 35 Fedoraproject Extra Packages For Enterprise Linux 7.05 Github repositories available

6.5

CVSSv3

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a...

Python Python Python Python 3.10.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server Tus 8.4 Redhat Enterprise Linux Eus 8.4 Redhat Enterprise Linux Server Aus 8.4 Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4 Redhat Enterprise Linux For Power Little Endian 8.0 Redhat Enterprise Linux For Ibm Z Systems Eus 8.4 Redhat Enterprise Linux For Ibm Z Systems 8.0 Redhat Enterprise Linux For Power Little Endian Eus 8.4 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4 Redhat Codeready Linux Builder For Power Little Endian 8.0 Redhat Codeready Linux Builder 8.0 Redhat Codeready Linux Builder For Ibm Z Systems 8.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Extra Packages For Enterprise Linux 7.0 Netapp Ontap Select Deploy Administration Utility -Netapp Hci Compute Node Firmware -Netapp Management Services For Element Software And Netapp Hci -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -1 Github repository available

7.8

CVSSv3

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution....

Blender Blender 2.93.8 Blender Blender 3.0 Fedoraproject Fedora 34 Fedoraproject Extra Packages For Enterprise Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook