fedoraproject

5,423 tracked vulnerabilities.

CVE-2013-7089 HIGH
ClamAV < 0.97.7 - Information Exposure via dbg_printhex
Nov 15, 2019
CVSS 7.5
EPSS 0.02
CVE-2013-7088 CRITICAL
ClamAV < 0.97.7 - Buffer Overflow in libclamav
Nov 15, 2019
CVSS 9.8
EPSS 0.03
CVE-2013-7087 CRITICAL
ClamAV < 0.97.7 - Heap Memory Corruption via WWPack
Nov 15, 2019
CVSS 9.8
EPSS 0.03
CVE-2013-1820 MEDIUM
tuned < 2.0.2 - Local Process Termination via Insecure ktune Service Permissions
Nov 08, 2019
CVSS 5.5
EPSS 0.00
CVE-2013-5123 MEDIUM
pip < 1.5 - Man-in-the-Middle Attack via Insecure Mirror DNS Querying
Nov 05, 2019
CVSS 5.9
EPSS 0.08
CVE-2013-4409 CRITICAL
Djblets < 0.6.30 and Review Board < 1.7.15 - Remote Code Execution via JSON Request Parsing
Nov 04, 2019
CVSS 9.8
EPSS 0.04
CVE-2013-4251 HIGH
scipy < 0.12.1 - Insecure Temporary Directory Creation in scipy.weave
Nov 04, 2019
CVSS 7.8
EPSS 0.00
CVE-2013-4168 MEDIUM
SmokePing 2.6.9 - Cross-Site Scripting in Start and End Time Fields
Nov 01, 2019
CVSS 6.1
EPSS 0.01
CVE-2013-4751 HIGH
php-symfony2-Validator - Info Disclosure
Nov 01, 2019
CVSS 8.1
EPSS 0.01
CVE-2013-1931 MEDIUM
MantisBT 1.2.14 - Cross-Site Scripting via Version Deletion
Oct 31, 2019
CVSS 6.1
EPSS 0.02
CVE-2013-1930 MEDIUM
MantisBT 1.2.12-1.2.14 - Authenticated Workflow Bypass
Oct 31, 2019
CVSS 4.3
EPSS 0.01
CVE-2013-0159 HIGH
fedora-business-cards - Symlink Attack via /tmp/fedora-business-cards-buffer.svg
May 01, 2018
CVSS 7.1
EPSS 0.00
CVE-2013-7459 CRITICAL
Python Cryptography Toolkit - Buffer Overflow
Feb 15, 2017
CVSS 9.8
EPSS 0.10
CVE-2013-0334
Bundler < 1.7.0 - Arbitrary Gem Installation via Duplicate Gem Name in Multiple Sources
Oct 31, 2014
EPSS 0.04
CVE-2013-2014
OpenStack Keystone < 2013.1 - Denial of Service via Long Requests
Jun 02, 2014
EPSS 0.03
CVE-2013-6371
json-c < 0.12-20140410 - Denial of Service via Hash Collision
Apr 22, 2014
EPSS 0.03
CVE-2013-6370
json-c < 0.12-20140410 - Buffer Overflow in printbuf APIs
Apr 22, 2014
EPSS 0.04
CVE-2013-6456
libvirt 1.0.1-1.2.1 - Local Privilege Escalation and Denial of Service via Symlink Attacks on /dev
Apr 15, 2014
EPSS 0.01
CVE-2013-6476
Canonical Ubuntu Linux < 1.0.46 - Access Control
Mar 14, 2014
EPSS 0.00
CVE-2013-6475
Canonical Ubuntu Linux < 1.0.46 - Numeric Error
Mar 14, 2014
EPSS 0.03
CVE-2013-6474
cups-filters < 1.0.46 - Remote Code Execution via Crafted PDF File
Mar 14, 2014
EPSS 0.03
CVE-2013-2191
python-bugzilla < 0.9.0 - Man-in-the-Middle Attack via Unvalidated X.509 Certificates
Feb 08, 2014
EPSS 0.01
CVE-2013-2139
Fedora < 1.4.5 - Memory Corruption
Jan 16, 2014
EPSS 0.03
CVE-2013-4550
Bip <0.8.9 - Use After Free
Dec 24, 2013
EPSS 0.02
CVE-2013-6890
Debian Linux - Authentication Bypass
Dec 23, 2013
EPSS 0.09