Fedora 17

Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.

Published: 2016-03-30T10:00:00.000Z
Updated: 2024-08-06T08:29:22.055Z

Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

Published: 2016-03-30T10:00:00.000Z
Updated: 2024-08-06T08:29:22.026Z

libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files

Published: 2019-11-22T14:23:51.000Z
Updated: 2024-08-06T07:58:59.892Z

ClamAV before 0.97.7: dbg_printhex possible information leak

Published: 2019-11-15T14:23:32.000Z
Updated: 2024-08-06T17:53:45.841Z

ClamAV before 0.97.7 has buffer overflow in the libclamav component

Published: 2019-11-15T14:19:48.000Z
Updated: 2024-08-06T17:53:46.080Z

ClamAV before 0.97.7 has WWPack corrupt heap memory

Published: 2019-11-15T14:11:00.000Z
Updated: 2024-08-06T17:53:46.137Z

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

Published: 2019-12-03T00:00:00.000Z
Updated: 2024-08-06T16:38:01.619Z

python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.

Published: 2014-02-08T00:00:00.000Z
Updated: 2024-08-06T15:27:41.098Z

MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks.

Published: 2013-11-15T18:16:00.000Z
Updated: 2024-08-06T15:20:37.400Z

A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.

Published: 2019-10-31T19:05:05.000Z
Updated: 2024-08-06T15:20:37.228Z

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.

Published: 2019-10-31T19:05:01.000Z
Updated: 2024-08-06T15:20:37.209Z

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.

Published: 2013-04-25T23:00:00.000Z
Updated: 2024-08-06T15:20:37.326Z

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Published: 2020-01-28T14:30:24.000Z
Updated: 2024-08-06T15:20:37.112Z

pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

Published: 2013-08-16T10:00:00.000Z
Updated: 2024-08-06T15:20:37.202Z

user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search.

Published: 2013-03-25T21:00:00.000Z
Updated: 2024-08-06T15:13:33.007Z

tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.

Published: 2019-11-08T14:25:11.000Z
Updated: 2024-08-06T15:13:33.024Z

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

Published: 2013-12-12T18:00:00.000Z
Updated: 2024-08-06T15:13:33.201Z

The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request.

Published: 2013-04-19T10:00:00.000Z
Updated: 2024-08-06T15:04:48.177Z

thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file.

Published: 2013-12-13T18:00:00.000Z
Updated: 2024-08-06T14:25:09.614Z

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Published: 2013-07-08T20:00:00.000Z
Updated: 2024-09-16T22:21:09.232Z

Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.

Published: 2013-09-30T20:00:00.000Z
Updated: 2024-08-06T14:18:09.458Z

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

Published: 2013-02-08T20:00:00.000Z
Updated: 2024-08-06T14:18:09.230Z

The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg.

Published: 2018-05-01T19:00:00.000Z
Updated: 2024-08-06T14:18:09.148Z

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.

Published: 2019-11-20T14:16:24.000Z
Updated: 2024-08-06T21:28:38.963Z

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.

Published: 2013-02-13T01:00:00.000Z
Updated: 2024-08-06T21:21:28.811Z

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.

Published: 2013-01-18T11:00:00.000Z
Updated: 2024-08-06T21:14:16.440Z

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.

Published: 2019-12-30T19:57:08.000Z
Updated: 2024-08-06T21:14:16.253Z

gnome-system-log polkit policy allows arbitrary files on the system to be read

Published: 2019-11-25T13:11:27.000Z
Updated: 2024-08-06T21:05:47.349Z

xlockmore before 5.43 'dclock' security bypass vulnerability

Published: 2019-11-21T14:11:41.000Z
Updated: 2024-08-06T20:42:53.692Z

mom creates world-writable pid files in /var/run

Published: 2019-12-02T17:44:10.000Z
Updated: 2024-08-06T20:35:09.800Z

dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.

Published: 2012-10-09T23:00:00.000Z
Updated: 2024-08-06T20:35:09.839Z

Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.

Published: 2020-01-03T16:03:03.000Z
Updated: 2024-08-06T20:35:09.764Z

Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long protocol name.

Published: 2012-10-01T01:00:00.000Z
Updated: 2024-08-06T20:35:09.848Z

Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML external entity (XXE) injection attack.

Published: 2013-02-13T17:00:00.000Z
Updated: 2025-01-16T20:38:41.614Z

doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message.

Published: 2012-11-20T00:00:00.000Z
Updated: 2024-08-06T20:05:11.629Z

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.

Published: 2019-12-06T17:13:26.000Z
Updated: 2024-08-06T19:26:08.407Z

The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.

Published: 2014-04-07T15:00:00.000Z
Updated: 2024-08-06T19:26:07.705Z

Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.

Published: 2012-04-17T21:00:00.000Z
Updated: 2024-08-06T19:26:07.239Z

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.

Published: 2012-05-29T20:00:00.000Z
Updated: 2024-08-06T19:17:27.716Z

A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.

Published: 2019-12-06T15:46:09.000Z
Updated: 2024-08-06T19:01:02.776Z

Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.

Published: 2012-04-17T21:00:00.000Z
Updated: 2024-08-06T18:53:35.626Z

Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough

Published: 2019-11-14T16:29:28.000Z
Updated: 2024-08-06T18:53:36.290Z

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

Published: 2019-11-14T16:26:14.000Z
Updated: 2024-08-06T18:53:35.717Z

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

Published: 2019-11-14T15:56:53.000Z
Updated: 2024-08-06T18:53:35.678Z

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

Published: 2019-11-14T16:34:04.000Z
Updated: 2024-08-06T18:53:35.446Z

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php

Published: 2019-11-14T16:21:05.000Z
Updated: 2024-08-06T18:53:35.447Z

Moodle before 2.2.2: Overview report allows users to see hidden courses

Published: 2019-11-14T16:16:55.000Z
Updated: 2024-08-06T18:53:35.576Z

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

Published: 2019-11-14T16:09:56.000Z
Updated: 2024-08-06T18:53:35.435Z

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

Published: 2019-11-14T16:05:42.000Z
Updated: 2024-08-06T18:53:35.447Z

Moodle before 2.2.2 has users' private files included in course backups

Published: 2019-11-14T16:01:05.000Z
Updated: 2024-08-06T18:53:35.446Z

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

Published: 2019-11-14T15:48:08.000Z
Updated: 2024-08-06T18:53:35.521Z

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.

Published: 2019-12-05T20:20:25.000Z
Updated: 2024-08-06T18:45:27.466Z

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.

Published: 2019-12-05T20:03:52.000Z
Updated: 2024-08-06T18:45:27.370Z

Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.

Published: 2012-06-17T01:00:00.000Z
Updated: 2024-08-06T18:09:17.171Z

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

Published: 2012-03-22T16:00:00.000Z
Updated: 2025-06-09T15:35:52.219Z

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow.

Published: 2014-05-05T17:00:00.000Z
Updated: 2024-08-07T04:09:39.066Z

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.

Published: 2013-05-29T10:00:00.000Z
Updated: 2024-08-08T04:06:54.807Z