Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fedoraproject fedora 24 vulnerabilities and exploits
(subscribe to this query)
5.5
CVSSv3
CVE-2016-8884
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote malicious users to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CV...
Jasper Project Jasper 1.900.5
Fedoraproject Fedora 24
Fedoraproject Fedora 23
9.8
CVSSv3
CVE-2016-2173
org.springframework.core.serializer.DefaultDeserializer in Spring AMQP prior to 1.5.5 allows remote malicious users to execute arbitrary code.
Fedoraproject Fedora 24
Fedoraproject Fedora 22
Fedoraproject Fedora 23
Vmware Spring Advanced Message Queuing Protocol
1 Github repository
5.5
CVSSv3
CVE-2016-3095
server/bin/pulp-gen-ca-certificate in Pulp prior to 2.8.2 allows local users to read the generated private key.
Fedoraproject Fedora 24
Pulpproject Pulp
7.5
CVSSv3
CVE-2016-6515
The auth_password function in auth-passwd.c in sshd in OpenSSH prior to 7.3 does not limit password lengths for password authentication, which allows remote malicious users to cause a denial of service (crypt CPU consumption) via a long string.
Openbsd Openssh
Fedoraproject Fedora 24
1 EDB exploit
3 Github repositories
7.5
CVSSv3
CVE-2016-9956
The route manager in FlightGear prior to 2016.4.4 allows remote malicious users to write to arbitrary files via a crafted Nasal script.
Debian Debian Linux 8.0
Fedoraproject Fedora 25
Fedoraproject Fedora 24
Flightgear Flightgear
9.1
CVSSv3
CVE-2016-6254
Heap-based buffer overflow in the parse_packet function in network.c in collectd prior to 5.4.3 and 5.x prior to 5.5.2 allows remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.
Debian Debian Linux 8.0
Collectd Collectd
Fedoraproject Fedora 24
Fedoraproject Fedora 23
7.8
CVSSv3
CVE-2016-2334
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip prior to 16.00 and p7zip allows remote malicious users to execute arbitrary code via a crafted HFS+ image.
7-zip 7-zip
Fedoraproject Fedora 24
Fedoraproject Fedora 23
Oracle Solaris
2 Github repositories
7.8
CVSSv3
CVE-2016-3096
The create_script function in the lxc_container module in Ansible prior to 1.9.6-1 and 2.x prior to 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path direct...
Fedoraproject Fedora 22
Fedoraproject Fedora 24
Fedoraproject Fedora 23
Redhat Ansible
Redhat Ansible 2.0
Redhat Ansible 2.0.1
7.5
CVSSv3
CVE-2016-7969
The wrap_lines_smart function in ass_render.c in libass prior to 0.13.4 allows remote malicious users to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."
Opensuse Leap 42.1
Opensuse Opensuse 13.2
Fedoraproject Fedora 25
Fedoraproject Fedora 24
Fedoraproject Fedora 23
Libass Project Libass
7.5
CVSSv3
CVE-2016-4414
The onReadyRead function in core/coreauthhandler.cpp in Quassel prior to 0.12.4 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.
Opensuse Leap 42.1
Opensuse Opensuse 13.2
Quassel-irc Quassel
Fedoraproject Fedora 22
Fedoraproject Fedora 24
Fedoraproject Fedora 23
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »