fedoraproject

5,423 tracked vulnerabilities.

CVE-2013-4124
Samba 3.x-3.5.21, 3.6.x-3.6.16, 4.x-4.0.7 - Denial of Service via Malformed NTTRANS Packet
Aug 06, 2013
EPSS 0.69
CVE-2013-2219
389 Directory Server and Red Hat Directory Server < 8.2 - Authenticated Information Disclosure via Search Query
Jul 31, 2013
EPSS 0.02
CVE-2013-4854
ISC BIND <9.8.5-P2,9.8.6b1,9.9.x <9.9.3-P2,9.9.4b1 - DoS
Jul 29, 2013
EPSS 0.34
CVE-2013-2028
nginx 1.3.9-1.4.0 - Remote Code Execution via Chunked Transfer-Encoding
Jul 20, 2013
EPSS 0.87
CVE-2013-0237
Moxiecode plupload < 1.5.5 - Cross-Site Scripting via id Parameter
Jul 08, 2013
EPSS 0.03
CVE-2013-2064
Debian Linux < 1.9 - Numeric Error
Jun 15, 2013
EPSS 0.02
CVE-2013-1897
389 Directory Server 1.2.x < 1.2.11.20 and 1.3.x < 1.3.0.5 - Information Disclosure via BASE Search
May 13, 2013
EPSS 0.02
CVE-2013-1915
ModSecurity < 2.7.3 - XML External Entity Injection
Apr 25, 2013
EPSS 0.04
CVE-2013-1416
MIT Kerberos 5 < 1.10.5 - Authenticated Denial of Service via TGS-REQ Realm Referral
Apr 19, 2013
EPSS 0.03
CVE-2013-1830
Moodle < 2.1.10, 2.2.x < 2.2.8, 2.3.x < 2.3.5, 2.4.x < 2.4.2 - Sensitive Information Exposure
Mar 25, 2013
EPSS 0.02
CVE-2013-0287
SSSD 1.9.0-1.9.4 - Authenticated Access Control Bypass via Simple Access Provider
Mar 21, 2013
EPSS 0.02
CVE-2013-0312
389 Directory Server < 1.3.0.4 - Denial of Service via Zero-Length LDAP Control Sequence
Mar 13, 2013
EPSS 0.03
CVE-2013-0220
SSSD < 1.9.4 - Denial of Service via Crafted SSSD Packet
Feb 24, 2013
EPSS 0.03
CVE-2013-0219
SSSD < 1.9.4 - Arbitrary File Manipulation via Symlink Attack
Feb 24, 2013
EPSS 0.00
CVE-2013-0170
libvirt 0.9.6-0.9.6.3, 0.9.11-0.9.11.8, 0.10.2-0.10.2.2, 1.0.0-1.0.1 - Use-After-Free in virNetMessageFree
Feb 08, 2013
EPSS 0.06
CVE-2012-4451 MEDIUM
Zend Framework < 2.0.1 - Cross-Site Scripting in Multiple Components
Jan 03, 2020
CVSS 6.1
EPSS 0.01
CVE-2012-5645 HIGH
freeciv < 2.3.4 - Denial of Service via Crafted Packet Processing
Dec 30, 2019
CVSS 7.5
EPSS 0.04
CVE-2012-5474 MEDIUM
Red Hat OpenStack Platform <2.0 - Info Disclosure
Dec 30, 2019
CVSS 5.5
EPSS 0.00
CVE-2012-3462 HIGH
SSSD 1.9.0 - Improper Authentication via HBAC Rule Bypass
Dec 26, 2019
CVSS 8.8
EPSS 0.02
CVE-2012-2130 HIGH
PolarSSL 0.99pre4-1.1.1 - Inadequate Encryption Strength in Key Generation
Dec 06, 2019
CVSS 7.4
EPSS 0.02
CVE-2012-1615 HIGH
Fedoraproject Sectool - Privilege Escalation via Incorrect DBus File
Dec 06, 2019
CVSS 7.8
EPSS 0.00
CVE-2012-1115 MEDIUM
LDAP Account Manager (LAM) Pro 3.6 - XSS
Dec 05, 2019
CVSS 6.1
EPSS 0.02
CVE-2012-1114 MEDIUM
LDAP Account Manager (LAM) Pro 3.6 - XSS
Dec 05, 2019
CVSS 6.1
EPSS 0.02
CVE-2012-1105 MEDIUM
Jasig Project php-pear-CAS 1.2.2 - Info Disclosure
Dec 05, 2019
CVSS 5.5
EPSS 0.00
CVE-2012-4480 HIGH
ovirt mom < 0.3.0-1 - Improper Privilege Management via World-Writable PID Files
Dec 02, 2019
CVSS 7.8
EPSS 0.00
Products
fedora 5,353 extra_packages_for_enterprise_linux 76 389_directory_server 39 sssd 19 fedora_core 8 389_administration_server 1 anaconda 1 arm_installer 1 commons 1 coolkey 1 crypto-utils 1 fedmsg 1 fedora_linux_kernel 1 python-fedora 1 sectool 1 selinux-policy 1 spin-kickstarts 1 supybot-fedora 1 unbound 1
Quick Filters
Critical CVEs With Exploits In CISA KEV