fedoraproject fedora 32 vulnerabilities and exploits

(subscribe to this query)

Heap buffer overflow in Tab Strip in Google Chrome on Windows before 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33

Heap buffer overflow in V8 in Google Chrome before 88.0.4324.182 allowed a remote malicious user to potentially exploit heap corruption via a crafted script.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33

GNOME Geary prior to 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the midd...

Gnome Geary Fedoraproject Fedora 31 Fedoraproject Fedora 32

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and previous versions unsupported versions. This...

Moodle Moodle Fedoraproject Fedora 32 Fedoraproject Fedora 33

If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the course. Versions affected: 3.9 to 3.9.2,...

Moodle Moodle Fedoraproject Fedora 32 Fedoraproject Fedora 33

In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10.

Moodle Moodle Fedoraproject Fedora 32 Fedoraproject Fedora 33

The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10.

Moodle Moodle Fedoraproject Fedora 32 Fedoraproject Fedora 33

The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle prior to 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Moodle Moodle Fedoraproject Fedora 32 Fedoraproject Fedora 34

Leptonica prior to 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.

Leptonica Leptonica Fedoraproject Fedora 32 Fedoraproject Fedora 33

In the Linux kernel 5.11 up to and including 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

« PREV 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook