Fedoraproject

Fedora

5319 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.3

CVE-2015-8837

Exploit
  • EPSS 1.06%
  • Published 30.03.2016 10:59:01
  • Last modified 12.04.2025 10:46:40

Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.

7.3

CVE-2015-8836

Exploit
  • EPSS 0.36%
  • Published 30.03.2016 10:59:00
  • Last modified 12.04.2025 10:46:40

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leadi...

8.6

CVE-2016-1286

  • EPSS 68.03%
  • Published 09.03.2016 23:59:03
  • Last modified 12.04.2025 10:46:40

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

6.8

CVE-2016-1285

  • EPSS 67.84%
  • Published 09.03.2016 23:59:02
  • Last modified 12.04.2025 10:46:40

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed...

7.1

CVE-2016-2316

Exploit
  • EPSS 1.09%
  • Published 22.02.2016 15:59:02
  • Last modified 12.04.2025 10:46:40

chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245,...

6.1

CVE-2016-0725

  • EPSS 0.6%
  • Published 22.02.2016 05:59:22
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or H...

4.3

CVE-2016-0724

  • EPSS 0.58%
  • Published 22.02.2016 05:59:21
  • Last modified 12.04.2025 10:46:40

The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhid...

5.4

CVE-2016-2045

  • EPSS 0.28%
  • Published 20.02.2016 01:59:08
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response.

5.3

CVE-2016-2044

  • EPSS 0.44%
  • Published 20.02.2016 01:59:07
  • Last modified 12.04.2025 10:46:40

libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.

5.4

CVE-2016-2043

  • EPSS 0.39%
  • Published 20.02.2016 01:59:06
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a table name to the ...