Fedoraproject

Fedora

5353 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2014-1526

  • EPSS 0.7%
  • Veröffentlicht 30.04.2014 10:49:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operati...

5

CVE-2014-1527

  • EPSS 0.85%
  • Veröffentlicht 30.04.2014 10:49:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.

10

CVE-2014-1528

  • EPSS 1.26%
  • Veröffentlicht 30.04.2014 10:49:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by...

9.3

CVE-2014-1529

Exploit
  • EPSS 1.32%
  • Veröffentlicht 30.04.2014 10:49:04
  • Zuletzt bearbeitet 25.11.2025 17:50:16

The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code i...

6.5

CVE-2014-2328

  • EPSS 1.13%
  • Veröffentlicht 23.04.2014 15:55:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.

5

CVE-2013-6370

Exploit
  • EPSS 0.76%
  • Veröffentlicht 22.04.2014 13:06:26
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.

5

CVE-2013-6371

  • EPSS 0.57%
  • Veröffentlicht 22.04.2014 13:06:26
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

4

CVE-2014-1517

  • EPSS 0.39%
  • Veröffentlicht 20.04.2014 01:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arr...

3.5

CVE-2014-2287

  • EPSS 5.22%
  • Veröffentlicht 18.04.2014 22:14:38
  • Zuletzt bearbeitet 12.04.2025 10:46:40

channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chan_sip has a certain configuration, allows remote ...

7.5

CVE-2014-2286

  • EPSS 14.76%
  • Veröffentlicht 18.04.2014 22:14:37
  • Zuletzt bearbeitet 12.04.2025 10:46:40

main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote attackers to cause a denial of service (stack consum...