fedoraproject fedora 17 vulnerabilities and exploits

(subscribe to this query)

The rasterization process in Inkscape prior to 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

Inkscape Inkscape Fedoraproject Fedora 17 Fedoraproject Fedora 16 Fedoraproject Fedora 18 Canonical Ubuntu Linux 11.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.1

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Debian Shadow -Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 17 Fedoraproject Fedora 16 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 5

Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and previous versions, when running on 64-bit machines, allows context-dependent malicious users to cause a denial of service (crash) via unspecified vectors, whi...

Libarchive Libarchive Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Opensuse Opensuse 13.1 Canonical Ubuntu Linux 14.10 Opensuse Opensuse 13.2 Fedoraproject Fedora 17 Fedoraproject Fedora 18 Freebsd Freebsd 9.3

Puppet 2.6.x prior to 2.6.15 and 2.7.x prior to 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x prior to 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by crea...

Puppet Puppet Puppet Puppet Enterprise 1.0 Puppet Puppet Enterprise 1.1 Puppet Puppet Enterprise Fedoraproject Fedora 17 Fedoraproject Fedora 16 Fedoraproject Fedora 15 Debian Debian Linux 7.0 Debian Debian Linux 6.0 Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 11.10 Canonical Ubuntu Linux 10.04

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call.

Golang Net Fedoraproject Fedora 28 Fedoraproject Fedora 29

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call.

Golang Net Fedoraproject Fedora 28 Fedoraproject Fedora 29

python-bugzilla prior to 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle malicious users to spoof Bugzilla servers via a crafted certificate.

Python Bugzilla Project Python-bugzilla Python Bugzilla Project Python-bugzilla 0.7.0 Python Bugzilla Project Python-bugzilla 0.6.2 Python Bugzilla Project Python-bugzilla 0.6.1 Python Bugzilla Project Python-bugzilla 0.6.0 Opensuse Opensuse 12.3 Opensuse Opensuse 12.2 Fedoraproject Fedora 18 Fedoraproject Fedora 17 Opensuse Opensuse 11.4

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

Apple Macos Apple Watchos Apple Iphone Os Apple Ipados Apple Tvos Apple Safari Fedoraproject Fedora 37

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x prior to 1.0.2, 0.10.2 prior to 0.10.2.3, 0.9.11 prior to 0.9.11.9, and 0.9.6 prior to 0.9.6.4 allows remote malicious users to cause a denial of service (crash) and possib...

Redhat Libvirt Suse Linux Enterprise Desktop 11 Opensuse Opensuse 12.2 Opensuse Opensuse 12.1 Suse Linux Enterprise Software Development Kit 11 Suse Linux Enterprise Server 11 Fedoraproject Fedora 17 Fedoraproject Fedora 16 Fedoraproject Fedora 18 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Eus 6.3 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04

1 Github repository

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

Redhat Tuned 2.10.0 Fedoraproject Fedora 17 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Debian Debian Linux 10.0

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook