Fedoraproject

Fedora

5353 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2014-8630

  • EPSS 0.63%
  • Veröffentlicht 01.02.2015 15:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a tw...

5

CVE-2014-9639

Exploit
  • EPSS 1.36%
  • Veröffentlicht 23.01.2015 15:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

5

CVE-2014-9638

Exploit
  • EPSS 1.28%
  • Veröffentlicht 23.01.2015 15:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

4

CVE-2015-0432

  • EPSS 0.42%
  • Veröffentlicht 21.01.2015 19:59:17
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.

7.5

CVE-2015-0411

  • EPSS 8.1%
  • Veröffentlicht 21.01.2015 19:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.

5.8

CVE-2015-1038

Exploit
  • EPSS 3.18%
  • Veröffentlicht 21.01.2015 18:59:51
  • Zuletzt bearbeitet 12.04.2025 10:46:40

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

5

CVE-2015-0407

  • EPSS 2.86%
  • Veröffentlicht 21.01.2015 18:59:47
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

5.4

CVE-2015-0383

  • EPSS 0.1%
  • Veröffentlicht 21.01.2015 18:59:28
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.

4.3

CVE-2015-0382

  • EPSS 5.03%
  • Veröffentlicht 21.01.2015 18:59:27
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.

4.3

CVE-2015-0381

  • EPSS 5.03%
  • Veröffentlicht 21.01.2015 18:59:26
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382.