fedoraproject fedora 33 vulnerabilities and exploits

(subscribe to this query)

Use after free in Blink in Google Chrome before 89.0.4389.128 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle prior to 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Moodle Moodle Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

In SaltStack Salt 2016.9 up to and including 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master...

Saltstack Salt Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

The ElGamal implementation in Crypto++ up to and including 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver&...

Cryptopp Crypto++Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket up to and including 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary...

Secureauth Impacket Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

1 Github repository

Use after free in Tab Strip in Google Chrome before 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

An issue exists in SaltStack Salt prior to 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion softwa...

Saltstack Salt Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

MediaWiki prior to 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.

Mediawiki Mediawiki Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

MediaWiki prior to 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

Mediawiki Mediawiki Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook