Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*
part: o version: 7 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Fedora (3d1a0fd8-541d-5822-ad4b-34abeff6c138) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-9278 |
not_vulnerable | 2026-06-08 05:06:11.311237 |
Details available
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login.
Published: 2014-12-06T15:00:00.000Z
Updated: 2024-08-06T13:40:25.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1011 |
vulnerable | 2026-06-08 04:56:40.901412 |
Details available
The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application.
Published: 2011-02-24T20:00:00.000Z
Updated: 2024-08-06T22:14:26.827Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1796 |
not_vulnerable | 2026-06-08 04:50:21.938089 |
Details available
Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service.
Published: 2008-04-15T17:00:00.000Z
Updated: 2024-08-07T08:32:01.244Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1552 |
not_vulnerable | 2026-06-08 04:50:21.044035 |
Details available
The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.
Published: 2008-03-31T17:00:00.000Z
Updated: 2024-08-07T08:24:42.749Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1292 |
not_vulnerable | 2026-06-08 04:50:19.832005 |
Details available
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.
Published: 2008-03-24T17:00:00.000Z
Updated: 2024-08-07T08:17:34.528Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1291 |
not_vulnerable | 2026-06-08 04:50:19.831531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1290 |
not_vulnerable | 2026-06-08 04:50:19.829258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0932 |
not_vulnerable | 2026-06-08 04:50:18.288533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0668 |
not_vulnerable | 2026-06-08 04:50:17.421949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0008 |
not_vulnerable | 2026-06-08 04:50:09.917358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6284 |
vulnerable | 2026-06-08 04:50:08.411184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5962 |
vulnerable | 2026-06-08 04:50:07.352960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5159 |
not_vulnerable | 2026-06-08 04:49:58.031596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4134 |
vulnerable | 2026-06-08 04:49:55.768512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.