fedoraproject fedora 18 vulnerabilities and exploits

(subscribe to this query)

The fedora-business-cards package prior to 1-0.1.beta1.fc17 on Fedora 17 and prior to 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg.

Fedoraproject Fedora 17 Fedoraproject Fedora 18

pip prior to 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

Pypa Pip Fedoraproject Fedora 17 Fedoraproject Fedora 18 Fedoraproject Fedora 19

A denial of service flaw was found in the way the server component of Freeciv prior to 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.

Freeciv Freeciv Fedoraproject Fedora 16 Fedoraproject Fedora 17 Fedoraproject Fedora 18

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote malicious users to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.

Dokuwiki Dokuwiki -Fedoraproject Fedora 16 Fedoraproject Fedora 17 Fedoraproject Fedora 18

ReviewBoard: has an access-control problem in REST API

Reviewboard Reviewboard Fedoraproject Fedora 18 Fedoraproject Fedora 19 Fedoraproject Fedora 20

Symfony 2.0.X prior to 2.0.24, 2.1.X prior to 2.1.12, 2.2.X prior to 2.2.5, and 2.3.X prior to 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generating an absolute URL. A remote attacker could exploit ...

Sensiolabs Symfony Fedoraproject Fedora 18 Fedoraproject Fedora 19

MantisBT 1.2.12 prior to 1.2.15 allows authenticated users to by the workflow restriction and close issues.

Mantisbt Mantisbt Fedoraproject Fedora 17 Fedoraproject Fedora 18

xlockmore prior to 5.43 'dclock' security bypass vulnerability

Xlockmore Xlockmore Sillycycle Xlockmore Fedoraproject Fedora 16 Fedoraproject Fedora 17 Fedoraproject Fedora 18

mom creates world-writable pid files in /var/run

Mom Mom Ovirt Mom Fedoraproject Fedora 17 Fedoraproject Fedora 18

packet.py in pyrad prior to 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote malicious users to obtain sensitive information via a brute force attack.

Pyrad Pyrad Pyrad Project Pyrad Fedoraproject Fedora 18 Fedoraproject Fedora 19 Fedoraproject Fedora 20

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook