Fedoraproject

Fedora

5357 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2019-14439

  • EPSS 10.76%
  • Veröffentlicht 30.07.2019 11:15:11
  • Zuletzt bearbeitet 21.11.2024 04:26:44

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logbac...

7.8

CVE-2019-14267

Exploit
  • EPSS 7.08%
  • Veröffentlicht 29.07.2019 16:15:12
  • Zuletzt bearbeitet 21.11.2024 04:26:19

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled.

5.5

CVE-2019-1020014

  • EPSS 0.41%
  • Veröffentlicht 29.07.2019 13:15:11
  • Zuletzt bearbeitet 21.11.2024 04:18:11

docker-credential-helpers before 0.6.3 has a double free in the List functions.

9.8

CVE-2019-14379

  • EPSS 8.05%
  • Veröffentlicht 29.07.2019 12:15:16
  • Zuletzt bearbeitet 21.11.2024 04:26:37

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.

6.5

CVE-2019-2805

  • EPSS 3.77%
  • Veröffentlicht 23.07.2019 23:15:42
  • Zuletzt bearbeitet 21.11.2024 04:41:35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attac...

4.9

CVE-2019-2780

  • EPSS 2.12%
  • Veröffentlicht 23.07.2019 23:15:41
  • Zuletzt bearbeitet 21.11.2024 04:41:32

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components / Services). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access...

4.9

CVE-2019-2784

  • EPSS 2.12%
  • Veröffentlicht 23.07.2019 23:15:41
  • Zuletzt bearbeitet 21.11.2024 04:41:33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot...

4.9

CVE-2019-2785

  • EPSS 2.53%
  • Veröffentlicht 23.07.2019 23:15:41
  • Zuletzt bearbeitet 21.11.2024 04:41:33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols...

4

CVE-2019-2789

  • EPSS 1.86%
  • Veröffentlicht 23.07.2019 23:15:41
  • Zuletzt bearbeitet 21.11.2024 04:41:33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access ...

4.9

CVE-2019-2774

  • EPSS 2.31%
  • Veröffentlicht 23.07.2019 23:15:40
  • Zuletzt bearbeitet 21.11.2024 04:41:32

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with netwo...