fedoraproject

CVE-2015-8011 CRITICAL

lldpd < 0.8.0 - Buffer Overflow in lldp_decode Function

Jan 28, 2020

CVSS 9.8

EPSS 0.05

CVE-2015-9541 HIGH

Qt < 5.12.8 - XML External Entity Injection via QXmlStreamReader

Jan 24, 2020

CVSS 7.5

EPSS 0.02

CVE-2015-5745 MEDIUM

QEMU < 2.4.0 - Denial of Service via Virtio Serial Bus Control Message

Jan 23, 2020

CVSS 6.5

EPSS 0.03

CVE-2015-5278 MEDIUM

QEMU < 2.4.0.1 - Denial of Service via Infinite Loop in ne2000_receive

Jan 23, 2020

CVSS 6.5

EPSS 0.02

CVE-2015-5239 MEDIUM

QEMU < 2.1.0 - Denial of Service via VNC CLIENT_CUT_TEXT Message

Jan 23, 2020

CVSS 6.5

EPSS 0.04

CVE-2015-7810 MEDIUM

libbluray < 0.8.0 - Time-of-check Time-of-use Race Condition in MountManager JAR Expansion

Nov 22, 2019

CVSS 4.7

EPSS 0.00

CVE-2015-2793 MEDIUM

ikiwiki < 3.20150329 - Cross-Site Scripting via openid_identifier Parameter

Nov 21, 2019

CVSS 6.1

EPSS 0.02

CVE-2015-8980 CRITICAL

php-gettext < 1.0.12 - Remote Code Execution via Plural Form Formula

Nov 04, 2019

CVSS 9.8

EPSS 0.07

CVE-2015-8008 HIGH

MediaWiki < 1.25.3 - OAuth IP Address Access Restriction Bypass via API Request

Dec 29, 2017

CVSS 7.5

EPSS 0.03

CVE-2015-5740 CRITICAL

Go <1.4.3 - HTTP Request Smuggling

Oct 18, 2017

CVSS 9.8

EPSS 0.04

CVE-2015-5739 CRITICAL

Go <1.4.3 - Server-Side Request Forgery

Oct 18, 2017

CVSS 9.8

EPSS 0.10

CVE-2015-7687 CRITICAL

OpenSMTPD < 5.7.2 - Use-After-Free via req_ca_vrfy_smtp and req_ca_vrfy_mta

Oct 16, 2017

CVSS 9.8

EPSS 0.04

CVE-2015-3229 MEDIUM

spin-kickstarts - Man-in-the-Middle Attack via HTTP Update Download

Oct 16, 2017

CVSS 5.9

EPSS 0.02

CVE-2015-5070 LOW

Battle for Wesnoth < 1.12.4 and 1.13.x < 1.13.1 - Sensitive Information Exposure via .pbl File Inclusion

Sep 26, 2017

CVSS 3.1

EPSS 0.01

CVE-2015-5069 MEDIUM

Battle for Wesnoth < 1.12.3 and 1.13.x < 1.13.1 - Exposure of Sensitive Information via .pbl File Inclusion

Sep 26, 2017

CVSS 4.3

EPSS 0.02

CVE-2015-5704 HIGH

devscripts <2.15.7 - Command Injection

Sep 25, 2017

CVSS 7.8

EPSS 0.01

CVE-2015-5607 HIGH

IPython 2-3 - Cross-Site Request Forgery in REST API

Sep 20, 2017

CVSS 8.8

EPSS 0.01

CVE-2015-3420 MEDIUM

Dovecot < 2.2.17 - Denial of Service via SSL Handshake Failure

Sep 19, 2017

CVSS 5.9

EPSS 0.03

CVE-2015-1854 HIGH

389 Directory Server < 1.3.3.10 - Improper Access Control via LDAP ModRDN Call

Sep 19, 2017

CVSS 7.5

EPSS 0.02

CVE-2015-5705 HIGH

devscripts <2.15.7 - Command Injection

Sep 06, 2017

CVSS 7.5

EPSS 0.03

CVE-2015-0233 MEDIUM

389 Administration Server < 1.1.37 - Insecure Temporary File Handling

Aug 28, 2017

CVSS 4.2

EPSS 0.00

CVE-2015-1395 HIGH

GNU patch <2.7.3 - Path Traversal

Aug 25, 2017

CVSS 7.5

EPSS 0.11

CVE-2015-5146 MEDIUM

Fedora < 4.2.8 - Improper Input Validation

Aug 24, 2017

CVSS 5.3

EPSS 0.04

CVE-2015-5258 HIGH

springframework-social <1.1.3 - CSRF

Aug 22, 2017

CVSS 8.8

EPSS 0.01

CVE-2015-1783 HIGH

Fedora < 2.4.0 - Memory Corruption

Aug 11, 2017

CVSS 7.5

EPSS 0.03