Fedora 16

Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.

Published: 2016-03-30T10:00:00.000Z
Updated: 2024-08-06T08:29:22.055Z

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

Published: 2016-03-30T10:00:00.000Z
Updated: 2024-08-06T08:29:22.026Z

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Published: 2019-12-03T00:00:00.000Z
Updated: 2024-08-06T16:38:01.619Z

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Published: 2013-07-08T20:00:00.000Z
Updated: 2024-09-16T22:21:09.232Z

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

Published: 2013-02-08T20:00:00.000Z
Updated: 2024-08-06T14:18:09.230Z

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."

Published: 2013-04-03T00:00:00.000Z
Updated: 2024-09-16T22:50:21.566Z

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Published: 2013-02-13T01:00:00.000Z
Updated: 2024-08-06T21:21:28.811Z

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

Published: 2013-01-18T11:00:00.000Z
Updated: 2024-08-06T21:14:16.440Z

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.

Published: 2019-12-30T19:57:08.000Z
Updated: 2024-08-06T21:14:16.253Z

xlockmore before 5.43 'dclock' security bypass vulnerability

Published: 2019-11-21T14:11:41.000Z
Updated: 2024-08-06T20:42:53.692Z

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Published: 2012-10-09T23:00:00.000Z
Updated: 2024-08-06T20:35:09.839Z

Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.

Published: 2020-01-03T16:03:03.000Z
Updated: 2024-08-06T20:35:09.764Z

Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long protocol name.

Published: 2012-10-01T01:00:00.000Z
Updated: 2024-08-06T20:35:09.848Z

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

Published: 2012-10-22T23:00:00.000Z
Updated: 2024-08-06T20:35:09.281Z

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.

Published: 2012-11-20T00:00:00.000Z
Updated: 2024-08-06T20:05:11.629Z

The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.

Published: 2014-04-07T15:00:00.000Z
Updated: 2024-08-06T19:26:07.705Z

Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.

Published: 2012-04-17T21:00:00.000Z
Updated: 2024-08-06T19:26:07.239Z

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.

Published: 2012-05-29T20:00:00.000Z
Updated: 2024-08-06T19:17:27.716Z

A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.

Published: 2019-12-06T15:46:09.000Z
Updated: 2024-08-06T19:01:02.776Z

The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dependent attackers to bypass the ASLR protection mechanism by leveraging a predictable base address for one of these libraries.

Published: 2013-03-01T02:00:00.000Z
Updated: 2024-08-06T19:01:02.689Z

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.

Published: 2012-04-17T21:00:00.000Z
Updated: 2024-08-06T18:53:35.626Z

Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough

Published: 2019-11-14T16:29:28.000Z
Updated: 2024-08-06T18:53:36.290Z

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

Published: 2019-11-14T16:26:14.000Z
Updated: 2024-08-06T18:53:35.717Z

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

Published: 2019-11-14T15:56:53.000Z
Updated: 2024-08-06T18:53:35.678Z

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

Published: 2019-11-14T16:34:04.000Z
Updated: 2024-08-06T18:53:35.446Z

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php

Published: 2019-11-14T16:21:05.000Z
Updated: 2024-08-06T18:53:35.447Z

Moodle before 2.2.2: Overview report allows users to see hidden courses

Published: 2019-11-14T16:16:55.000Z
Updated: 2024-08-06T18:53:35.576Z

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

Published: 2019-11-14T16:09:56.000Z
Updated: 2024-08-06T18:53:35.435Z

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

Published: 2019-11-14T16:05:42.000Z
Updated: 2024-08-06T18:53:35.447Z

Moodle before 2.2.2 has users' private files included in course backups

Published: 2019-11-14T16:01:05.000Z
Updated: 2024-08-06T18:53:35.446Z

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

Published: 2019-11-14T15:48:08.000Z
Updated: 2024-08-06T18:53:35.521Z

Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.

Published: 2012-06-21T15:00:00.000Z
Updated: 2024-08-06T18:45:27.489Z

The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.

Published: 2012-05-17T10:00:00.000Z
Updated: 2024-08-06T18:45:27.407Z

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.

Published: 2019-12-05T20:20:25.000Z
Updated: 2024-08-06T18:45:27.466Z

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.

Published: 2019-12-05T20:03:52.000Z
Updated: 2024-08-06T18:45:27.370Z

An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.

Published: 2019-12-05T18:26:36.000Z
Updated: 2024-08-06T18:45:27.250Z

OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.

Published: 2019-11-07T17:13:26.000Z
Updated: 2024-08-06T18:09:17.244Z

Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.

Published: 2012-06-17T01:00:00.000Z
Updated: 2024-08-06T18:09:17.171Z

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

Published: 2014-02-10T17:00:00.000Z
Updated: 2024-08-07T00:23:38.555Z

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

Published: 2011-12-25T01:00:00.000Z
Updated: 2024-08-07T00:16:35.035Z

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.

Published: 2011-12-15T02:00:00.000Z
Updated: 2024-10-21T16:11:56.211Z

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

Published: 2011-12-15T02:00:00.000Z
Updated: 2024-08-07T00:09:18.503Z

Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.

Published: 2011-12-08T20:00:00.000Z
Updated: 2024-08-07T00:01:51.591Z

The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

Published: 2011-11-17T19:00:00.000Z
Updated: 2024-08-07T00:01:50.500Z

ABRT might allow attackers to obtain sensitive information from crash reports.

Published: 2020-01-31T16:45:33.000Z
Updated: 2024-08-06T23:53:32.853Z

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

Published: 2012-03-22T16:00:00.000Z
Updated: 2025-06-09T15:35:52.219Z

An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied access, non-privileged users can still download the file attached to the comment if they know or guess its direct URL.

Published: 2019-11-15T16:21:51.000Z
Updated: 2024-08-06T23:08:23.951Z

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.

Published: 2014-05-05T17:00:00.000Z
Updated: 2024-08-07T04:09:39.066Z