Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fedoraproject fedora 22 vulnerabilities and exploits
(subscribe to this query)
187
VMScore
CVE-2016-1544
nghttp2 prior to 1.7.1 allows remote malicious users to cause a denial of service (memory exhaustion).
Nghttp2 Nghttp2
Fedoraproject Fedora 22
Fedoraproject Fedora 23
445
VMScore
CVE-2015-1827
The get_user_grouplist function in the extdom plug-in in FreeIPA prior to 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote malicious users to cause a denial of service (crash) via a group list request for a user that belongs to a large ...
Freeipa Freeipa
Fedoraproject Fedora 22
Fedoraproject Fedora 21
668
VMScore
CVE-2015-6816
ganglia-web prior to 3.7.1 allows remote malicious users to bypass authentication.
Fedoraproject Fedora 22
Fedoraproject Fedora 23
Fedoraproject Fedora 21
Ganglia Ganglia-web
383
VMScore
CVE-2014-8488
Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote malicious users to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.
Yourls Yourls 1.7
Fedoraproject Fedora 22
Fedoraproject Fedora 20
Fedoraproject Fedora 21
694
VMScore
CVE-2016-4021
The read_binary function in buffer.c in pgpdump prior to 0.30 allows context-dependent malicious users to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by the \xa3\x03 string.
Fedoraproject Fedora 22
Fedoraproject Fedora 24
Fedoraproject Fedora 23
Pgpdump Project Pgpdump
828
VMScore
CVE-2015-8106
Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf prior to 2.3.10 allows remote malicious users to execute arbitrary code via format string specifiers in the \keywords command in a crafted TeX file.
Latex2rtf Project Latex2rtf 2.3.8
Fedoraproject Fedora 22
Fedoraproject Fedora 24
Fedoraproject Fedora 23
516
VMScore
CVE-2015-0556
Open-source ARJ archiver 3.10.22 allows remote malicious users to conduct directory traversal attacks via a symlink attack in an ARJ archive.
Arj Software Arj Archiver
Fedoraproject Fedora 22
Fedoraproject Fedora 20
Fedoraproject Fedora 21
516
VMScore
CVE-2015-0557
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote malicious users to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.
Arj Software Arj Archiver
Fedoraproject Fedora 22
Fedoraproject Fedora 20
Fedoraproject Fedora 21
445
VMScore
CVE-2015-4410
The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows remote malicious users to cause a denial of service (worker resource consumption) or perform a cross-site scripting (XSS) attack via a crafted string.
Moped Project Moped -
Fedoraproject Fedora 22
Fedoraproject Fedora 21
383
VMScore
CVE-2015-8400
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) prior to 2.19 makes it easier for remote malicious users to conduct DNS rebinding attacks via the "/plain" URL.
Fedoraproject Fedora 22
Fedoraproject Fedora 23
Shellinabox Project Shellinabox
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834
CVE-2024-30100
CVE-2024-4577
physical
dos
CVE-2024-30099
CVE-2024-27801
CVE-2024-32146
logic flaw
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »