fedoraproject fedora 20 vulnerabilities and exploits

(subscribe to this query)

1.9

CVSSv2

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when...

Xen Xen Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

5

CVSSv2

The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors....

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22 Entrouvert Lasso

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi....

Ikiwiki Ikiwiki Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

5

CVSSv2

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent....

Mindrot Jbcrypt Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

7.5

CVSSv2

ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."...

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Clamav Clamav

7.5

CVSSv2

ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."...

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Clamav Clamav

7.5

CVSSv2

ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."...

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Clamav Clamav

5

CVSSv2

ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."...

Clamav Clamav Fedoraproject Fedora 20 Fedoraproject Fedora 211 Github repository available

4.3

CVSSv2

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures....

Dovecot Dovecot Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

5

CVSSv2

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client....

Libvncserver Project Libvncserver Fedoraproject Fedora 19 Fedoraproject Fedora 20 Fedoraproject Fedora 21

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook