Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fedoraproject fedora 21 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2015-3420
The ssl-proxy-openssl.c function in Dovecot prior to 2.2.17, when SSLv3 is disabled, allow remote malicious users to cause a denial of service (login process crash) via vectors related to handshake failures.
Dovecot Dovecot
Fedoraproject Fedora 21
Fedoraproject Fedora 20
Fedoraproject Fedora 22
169
VMScore
CVE-2015-2152
Xen 4.5.x and previous versions enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, wh...
Xen Xen
Fedoraproject Fedora 22
Fedoraproject Fedora 21
Fedoraproject Fedora 20
383
VMScore
CVE-2015-2793
Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki prior to 3.20150329 allows remote malicious users to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.
Ikiwiki Ikiwiki
Fedoraproject Fedora 22
Fedoraproject Fedora 20
Fedoraproject Fedora 21
445
VMScore
CVE-2015-0886
Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt prior to 0.4 makes it easier for remote malicious users to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.
Mindrot Jbcrypt
Fedoraproject Fedora 22
Fedoraproject Fedora 20
Fedoraproject Fedora 21
445
VMScore
CVE-2015-8008
The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows malicious users to bypass intended IP address access restrictions by making an API request with an existing token.
Mediawiki Mediawiki
Fedoraproject Fedora 23
Fedoraproject Fedora 21
Fedoraproject Fedora 22
668
VMScore
CVE-2014-9328
ClamAV prior to 0.98.6 allows remote malicious users to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
Fedoraproject Fedora 20
Fedoraproject Fedora 21
Clamav Clamav
445
VMScore
CVE-2015-1463
ClamAV prior to 0.98.6 allows remote malicious users to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."
Clamav Clamav
Fedoraproject Fedora 20
Fedoraproject Fedora 21
668
VMScore
CVE-2015-1461
ClamAV prior to 0.98.6 allows remote malicious users to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."
Fedoraproject Fedora 20
Fedoraproject Fedora 21
Clamav Clamav
668
VMScore
CVE-2015-1462
ClamAV prior to 0.98.6 allows remote malicious users to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."
Fedoraproject Fedora 20
Fedoraproject Fedora 21
Clamav Clamav
445
VMScore
CVE-2015-4411
The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby prior to 3.0.4 as used in rubygem-moped allows remote malicious users to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410.
Mongodb Bson
Fedoraproject Fedora 21
Fedoraproject Fedora 22
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »