cve.bz

fedoraproject fedora vulnerabilities, newest first, page 82

Filter
  1. 6.5CVE-2010-3439EPSS 1.8%

    It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command.

  2. 9.8CVE-2010-3438EPSS 1.7%

    libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as "some text\rQUIT" to the 'privmsg' handler, which would cause the cli…

  3. 5.5CVE-2019-18849EPSS 1.2%

    In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

  4. 7.5CVE-2019-10222EPSS 4.5%

    A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a r…

  5. 5.5CVE-2013-1820EPSS 0.4%

    tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.

  6. 4.3CVE-2012-0049EPSS 1.3%

    OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.

  7. 5.5CVE-2019-18811EPSS 0.4%

    A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka …

  8. 4.6CVE-2019-18809EPSS 0.5%

    A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.

  9. 5.5CVE-2019-18808EPSS 0.3%

    A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.

  10. 7.5CVE-2019-18804EPSS 3.7%

    DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.

  11. 6.1CVE-2016-1000037EPSS 1.1%

    Pagure: XSS possible in file attachment endpoint

  12. 5.5CVE-2010-4178EPSS 0.4%

    MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console

  13. 4.9CVE-2019-14847EPSS 2.1%

    A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.

  14. 5.4CVE-2019-14833EPSS 1.9%

    A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller ca…

  15. 6.5CVE-2019-10218EPSS 3.4%

    A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside…

  16. 5.9CVE-2013-5123ExploitEPSS 8.0%

    The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

  17. 9.8CVE-2015-8980EPSS 6.4%

    The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.

  18. 9.8CVE-2013-4409EPSS 3.6%

    An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

  19. 7.8CVE-2013-4251EPSS 0.4%

    The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

  20. 6.1CVE-2013-4168EPSS 1.1%

    Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.

  21. 8.1CVE-2013-4751EPSS 1.4%

    php-symfony2-Validator has loss of information during serialization

  22. 6.1CVE-2013-1931EPSS 2.3%

    A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.

  23. 4.3CVE-2013-1930EPSS 1.2%

    MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.

  24. 9.8CVE-2019-18425EPSS 2.5%

    An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86 PV emulation. When emulating certain P…

  25. 6.8CVE-2019-18424EPSS 0.5%

    An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device. This occurs because passed through PCI devices may corrupt host m…

  26. 8.8CVE-2019-18423EPSS 2.1%

    An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() …

  27. 8.8CVE-2019-18422EPSS 1.8%

    An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. Wh…

  28. 7.5CVE-2019-18421EPSS 1.7%

    An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations. There are issues with restartable PV type change operatio…

  29. 6.5CVE-2019-18420EPSS 2.9%

    An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOP_initialise hypercall. hypercall_create_continuation() is a variadic function which uses a printf-like format string to i…

  30. 9.8CVE-2018-21029EPSS 3.1%

    systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed…

  31. 9.8CVE-2019-11043KEVExploitEPSS 99.7%

    In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus op…

  32. 7.5CVE-2019-17596EPSS 4.7%

    Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certifi…

  33. 5.4CVE-2019-15587EPSS 1.6%

    In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

  34. 8.1CVE-2019-17498EPSS 3.8%

    In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH ser…

  35. 7.8CVE-2019-18218EPSS 1.8%

    cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

  36. 8.8CVE-2019-14287ExploitEPSS 64%

    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows b…

  37. 4.4CVE-2019-3018EPSS 2.1%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple p…

  38. 6.5CVE-2019-3011EPSS 2.7%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multip…

  39. 4.4CVE-2019-3009EPSS 2.5%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access vi…

  40. 6.5CVE-2019-3004EPSS 2.7%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multi…

  41. 4.9CVE-2019-2998EPSS 2.6%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via m…

  42. 4.9CVE-2019-2997EPSS 2.6%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multipl…

  43. 5.3CVE-2019-2993EPSS 2.2%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with ne…

  44. 5.5CVE-2019-2991EPSS 2.5%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.017 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mu…

  45. 4.9CVE-2019-2982EPSS 2.6%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via m…

  46. 6.5CVE-2019-2974EPSS 3.8%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privile…

  47. 4.9CVE-2019-2968EPSS 2.6%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro…

  48. 6.5CVE-2019-2967EPSS 2.7%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mu…

  49. 6.5CVE-2019-2966EPSS 2.7%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mu…

  50. 4.9CVE-2019-2963EPSS 2.6%

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro…