fedoraproject fedora 35 vulnerabilities and exploits

(subscribe to this query)

MariaDB up to and including 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

Mariadb Mariadb Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

The ElGamal implementation in Crypto++ up to and including 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver&...

Cryptopp Crypto++Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

In GNOME libgfbgraph up to and including 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Gnome Libgfbgraph Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

In GNOME libzapojit up to and including 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Gnome Libzapojit Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

MariaDB v10.5 to v10.7 exists to contain a segmentation fault via the component st_select_lex_unit::exclude_level.

Mariadb Mariadb Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

Use after free in protocol handling in Google Chrome before 92.0.4515.107 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Out of bounds write in Autofill in Google Chrome before 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Use after free in DevTools in Google Chrome before 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Insufficient policy enforcement in Installer in Google Chrome before 92.0.4515.107 allowed a remote malicious user to perform local privilege escalation via a crafted file.

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Uninitialized use in Media in Google Chrome before 92.0.4515.107 allowed a remote malicious user to perform out of bounds memory access via a crafted HTML page.

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook