fedoraproject fedora 33 vulnerabilities and exploits

(subscribe to this query)

An issue exists in Cacti 1.2.x up to and including 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated malicious users to execute arbitrary SQL commands via the site_id parameter. This can lead to remote code execution.

Cacti Cacti Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

A flaw was found in CImg in versions before 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

Cimg Cimg Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Use after free in screen sharing in Google Chrome before 89.0.4389.114 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Use after free in V8 in Google Chrome before 89.0.4389.114 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Heap buffer overflow in TabStrip in Google Chrome on Windows before 89.0.4389.114 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Heap buffer overflow in TabStrip in Google Chrome before 89.0.4389.114 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Out of bounds read in IPC in Google Chrome before 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook