Fedoraproject

Fedora

5319 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2015-1609

  • EPSS 1.7%
  • Published 30.03.2015 14:59:02
  • Last modified 12.04.2025 10:46:40

MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request.

7.5

CVE-2015-2331

Exploit
  • EPSS 42.71%
  • Published 30.03.2015 10:59:12
  • Last modified 12.04.2025 10:46:40

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial ...

2.1

CVE-2015-2157

  • EPSS 0.27%
  • Published 27.03.2015 14:59:05
  • Last modified 12.04.2025 10:46:40

The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.

4.3

CVE-2015-2317

  • EPSS 4.67%
  • Published 25.03.2015 14:59:04
  • Last modified 12.04.2025 10:46:40

The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a con...

5

CVE-2015-2316

  • EPSS 2%
  • Published 25.03.2015 14:59:02
  • Last modified 12.04.2025 10:46:40

The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the ...

5

CVE-2015-0295

  • EPSS 1.55%
  • Published 25.03.2015 14:59:01
  • Last modified 12.04.2025 10:46:40

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

7.5

CVE-2015-2155

  • EPSS 4.98%
  • Published 24.03.2015 17:59:08
  • Last modified 12.04.2025 10:46:40

The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

5

CVE-2015-0252

  • EPSS 26.74%
  • Published 24.03.2015 17:59:01
  • Last modified 12.04.2025 10:46:40

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.

1.9

CVE-2015-2152

  • EPSS 0.08%
  • Published 18.03.2015 16:59:02
  • Last modified 12.04.2025 10:46:40

Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY envi...

7.5

CVE-2015-0778

  • EPSS 0.9%
  • Published 16.03.2015 14:59:01
  • Last modified 12.04.2025 10:46:40

osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.