cve.bz

fedoraproject fedora vulnerabilities, newest first, page 81

Filter
  1. 7.5CVE-2012-4524EPSS 2.9%

    xlockmore before 5.43 'dclock' security bypass vulnerability

  2. 7.5CVE-2013-1817EPSS 2.5%

    MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.

  3. 7.5CVE-2013-1816EPSS 2.7%

    MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.

  4. 5.5CVE-2012-6136EPSS 0.3%

    tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

  5. 3.3CVE-2019-19126EPSS 0.4%

    On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible…

  6. 5.5CVE-2011-2924EPSS 0.4%

    foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks b…

  7. 7.3CVE-2019-18934EPSS 3.2%

    Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` suppo…

  8. 5.5CVE-2014-5118EPSS 0.4%

    Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability

  9. 4.0CVE-2019-19073EPSS 0.5%

    Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config…

  10. 4.4CVE-2019-19072EPSS 0.4%

    A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-96c5c6e6a5b6.

  11. 7.5CVE-2019-19070EPSS 2.8%

    A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures, aka CID-d3b0f…

  12. 4.6CVE-2019-19068EPSS 0.5%

    A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit…

  13. 4.7CVE-2019-19066EPSS 0.5%

    A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e…

  14. 7.5CVE-2019-19064EPSS 3.2%

    A memory leak in the fsl_lpspi_probe() function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering pm_runtime_get_sync() failures, aka CID-057b…

  15. 4.6CVE-2019-19063EPSS 0.9%

    Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

  16. 4.7CVE-2019-19062EPSS 0.6%

    A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde59320…

  17. 4.7CVE-2019-19059EPSS 0.4%

    Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by trigge…

  18. 4.7CVE-2019-19058EPSS 0.4%

    A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID…

  19. 3.3CVE-2019-19057EPSS 0.8%

    Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci…

  20. 4.7CVE-2019-19056EPSS 0.4%

    A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pc…

  21. 5.5CVE-2019-19055EPSS 0.4%

    A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CI…

  22. 4.7CVE-2019-19054EPSS 0.4%

    A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-…

  23. 7.5CVE-2019-19050EPSS 5.1%

    A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c0…

  24. 6.5CVE-2019-19046EPSS 3.2%

    A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CI…

  25. 5.5CVE-2019-19043EPSS 0.4%

    A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() fai…

  26. 9.8CVE-2019-19012EPSS 11%

    An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled…

  27. 9.8CVE-2019-19010EPSS 2.3%

    Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.

  28. 7.5CVE-2011-2726EPSS 1.6%

    An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file…

  29. 7.5CVE-2014-0021EPSS 4.2%

    Chrony before 1.29.1 has traffic amplification in cmdmon protocol

  30. 7.5CVE-2013-7089EPSS 1.9%

    ClamAV before 0.97.7: dbg_printhex possible information leak

  31. 9.8CVE-2013-7088EPSS 3.1%

    ClamAV before 0.97.7 has buffer overflow in the libclamav component

  32. 9.8CVE-2013-7087EPSS 2.9%

    ClamAV before 0.97.7 has WWPack corrupt heap memory

  33. 8.8CVE-2019-14869EPSS 3.1%

    A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw b…

  34. 9.8CVE-2019-18928EPSS 2.4%

    Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection.

  35. 6.5CVE-2018-12207EPSS 0.9%

    Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

  36. 6.5CVE-2019-11135EPSS 3.1%

    TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.

  37. 7.5CVE-2019-14818EPSS 2.8%

    A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING…

  38. 7.5CVE-2012-1170EPSS 0.9%

    Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough

  39. 5.3CVE-2012-1169EPSS 1.8%

    Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

  40. 4.3CVE-2012-1161EPSS 1.4%

    Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

  41. 2.7CVE-2012-1160EPSS 1.2%

    Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php

  42. 4.3CVE-2012-1159EPSS 1.4%

    Moodle before 2.2.2: Overview report allows users to see hidden courses

  43. 4.3CVE-2012-1158EPSS 1.4%

    Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

  44. 4.3CVE-2012-1157EPSS 1.2%

    Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

  45. 8.2CVE-2012-1168EPSS 2.3%

    Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

  46. 7.5CVE-2012-1156EPSS 2.1%

    Moodle before 2.2.2 has users' private files included in course backups

  47. 7.5CVE-2012-1155EPSS 2.1%

    Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

  48. 7.8CVE-2010-4661EPSS 0.4%

    udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.

  49. 8.6CVE-2019-18837EPSS 1.4%

    An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpat…

  50. 5.5CVE-2010-4177EPSS 0.3%

    mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes.