fedoraproject fedora 33 vulnerabilities and exploits

(subscribe to this query)

MediaWiki prior to 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

Mediawiki Mediawiki Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

In GNOME libgfbgraph up to and including 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Gnome Libgfbgraph Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

In GNOME libzapojit up to and including 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Gnome Libzapojit Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

An issue exists in the Oauth extension for MediaWiki up to and including 1.35.2. MWOAuthConsumerSubmitControl.php does not ensure that the length of an RSA key will fit in a MySQL blob.

Mediawiki Mediawiki Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

A flaw was found in CImg in versions before 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

Cimg Cimg Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

In SaltStack Salt 2016.9 up to and including 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master...

Saltstack Salt Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

MediaWiki prior to 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

Mediawiki Mediawiki Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

MediaWiki prior to 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

Mediawiki Mediawiki Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

In containerd (an industry-standard container runtime) prior to 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may re...

Linuxfoundation Containerd Fedoraproject Fedora 33 Fedoraproject Fedora 34

1 Github repository

Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts web...

Eventlet Eventlet Fedoraproject Fedora 33 Fedoraproject Fedora 34

« PREV 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook