fedoraproject fedora 34 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 346 Github repositories available

5

CVSSv2

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses....

Net\\ \\ Netmask Project Fedoraproject Fedora 34 Fedoraproject Fedora 33 Fedoraproject Fedora 321 Article available

7.5

CVSSv2

An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

1.9

CVSSv2

An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

4.6

CVSSv2

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 343 Github repositories available2 Articles available

6.8

CVSSv2

Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

4.6

CVSSv2

Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device....

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34

6.8

CVSSv2

Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34

6.8

CVSSv2

Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34

6.8

CVSSv2

Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook