fedoraproject fedora 20 vulnerabilities and exploits

(subscribe to this query)

ReviewBoard: has an access-control problem in REST API

Reviewboard Reviewboard Fedoraproject Fedora 18 Fedoraproject Fedora 19 Fedoraproject Fedora 20

Xen 4.5.x and previous versions enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, wh...

Xen Xen Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

The ssl-proxy-openssl.c function in Dovecot prior to 2.2.17, when SSLv3 is disabled, allow remote malicious users to cause a denial of service (login process crash) via vectors related to handshake failures.

Dovecot Dovecot Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki prior to 3.20150329 allows remote malicious users to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.

Ikiwiki Ikiwiki Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt prior to 0.4 makes it easier for remote malicious users to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.

Mindrot Jbcrypt Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22

ClamAV prior to 0.98.6 allows remote malicious users to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Clamav Clamav

ClamAV prior to 0.98.6 allows remote malicious users to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."

Clamav Clamav Fedoraproject Fedora 20 Fedoraproject Fedora 21

ClamAV prior to 0.98.6 allows remote malicious users to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Clamav Clamav

ClamAV prior to 0.98.6 allows remote malicious users to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."

Fedoraproject Fedora 20 Fedoraproject Fedora 21 Clamav Clamav

A NULL pointer dereference flaw was found in the way LibVNCServer prior to 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

Libvncserver Project Libvncserver Fedoraproject Fedora 19 Fedoraproject Fedora 20 Fedoraproject Fedora 21

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook