fedoraproject fedora 31 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

The marked package prior to 0.3.4 for Node.js allows malicious users to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service (ReDoS)....

Marked Project Marked Fedoraproject Fedora 31 Fedoraproject Fedora 32

5.5

CVSSv3

ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.

Libemf Project Libemf Fedoraproject Fedora 31 Fedoraproject Fedora 32

6.7

CVSSv3

In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).

Linux Linux Kernel Fedoraproject Fedora 30 Fedoraproject Fedora 31

6.5

CVSSv3

ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.

Znc Znc 1.8.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32

7.5

CVSSv3

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data, the attacker may gain access to valid admin usern...

Elog Project Elog Fedoraproject Fedora 30 Fedoraproject Fedora 31

7.5

CVSSv3

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

Elog Project Elog Fedoraproject Fedora 30 Fedoraproject Fedora 31

7.5

CVSSv3

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.

Elog Project Elog Fedoraproject Fedora 30 Fedoraproject Fedora 31

7.5

CVSSv3

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request.

Elog Project Elog Fedoraproject Fedora 30 Fedoraproject Fedora 31

6.5

CVSSv3

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

Elog Project Elog Fedoraproject Fedora 30 Fedoraproject Fedora 31

7.5

CVSSv3

gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent malicious users to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message.

Gnome Gdk-pixbuf Fedoraproject Fedora 30 Fedoraproject Fedora 31

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook