fedoraproject
5,423 tracked vulnerabilities.
CVE-2008-4577
HIGH
Dovecot < 1.1.4 - Incorrect Authorization via ACL Plugin
Oct 15, 2008
CVSS 7.5
EPSS 0.02
CVE-2008-3969
BitlBee < 1.2.3 - Account Hijacking via USTATUS_IDENTIFIED State Handling
Sep 11, 2008
EPSS 0.02
CVE-2008-3282
HIGH
OpenOffice.org 2.4.1 - Denial of Service via Integer Overflow in Memory Allocator
Aug 29, 2008
CVSS 7.8
EPSS 0.11
CVE-2008-3281
MEDIUM
libxml2 < 2.6.32 - Denial of Service via Recursive Entity Expansion in DTDs
Aug 27, 2008
CVSS 6.5
EPSS 0.03
CVE-2008-3424
Condor <7.0.4 - Privilege Escalation
Jul 31, 2008
EPSS 0.03
CVE-2008-2951
MEDIUM
Trac < 0.10.5 - Open Redirect via Search Script q Parameter
Jul 27, 2008
CVSS 6.1
EPSS 0.02
CVE-2008-3218
Drupal 6.0-6.2 - Cross-Site Scripting via Taxonomy Term Preview and OpenID Values
Jul 18, 2008
EPSS 0.02
CVE-2008-3219
Drupal 5.x < 5.8 and 6.x < 6.3 - Cross-Site Scripting via Object HTML Tag
Jul 18, 2008
EPSS 0.02
CVE-2008-3220
Drupal 5.x < 5.8 and 6.x < 6.3 - Cross-Site Request Forgery via Translated Strings Deletion
Jul 18, 2008
EPSS 0.01
CVE-2008-3221
Drupal 6.x < 6.3 - Cross-Site Request Forgery via OpenID Identity Deletion
Jul 18, 2008
EPSS 0.01
CVE-2008-3222
Drupal 5.x < 5.9 and 6.x < 6.3 - Session Fixation
Jul 18, 2008
EPSS 0.03
CVE-2008-3223
Drupal 6.x < 6.3 - SQL Injection via Numeric Field Placeholder
Jul 18, 2008
EPSS 0.03
CVE-2008-2371
PCRE 7.7 - Heap-Based Buffer Overflow in pcre_compile.c
Jul 07, 2008
EPSS 0.07
CVE-2008-2374
CRITICAL
bluez-libs < 3.34 - Denial of Service via SDP Packet String Length Field
Jul 07, 2008
CVSS 9.8
EPSS 0.04
CVE-2008-2944
Fedoraproject Fedora Core - Double Free
Jun 30, 2008
EPSS 0.00
CVE-2008-2364
Apache HTTP Server 2.0.35-2.0.63 - Denial of Service via Unlimited Interim Responses
Jun 13, 2008
EPSS 0.13
CVE-2008-2575
cbrpager < 0.9.17 - OS Command Injection via Archive Filename
Jun 06, 2008
EPSS 0.03
CVE-2008-2108
CRITICAL
PHP <4.4.8 & <5.2.5 - Info Disclosure
May 07, 2008
CVSS 9.8
EPSS 0.04
CVE-2008-0599
CRITICAL
PHP < 5.2.6 - Remote Code Execution via PATH_TRANSLATED Buffer Overflow
May 05, 2008
CVSS 9.8
EPSS 0.11
CVE-2008-1375
Linux kernel <2.6.24.6-2.6.25.1 - DoS
May 02, 2008
EPSS 0.00
CVE-2008-1567
MEDIUM
phpMyAdmin <2.11.5.1 - Info Disclosure
Mar 31, 2008
CVSS 5.5
EPSS 0.00
CVE-2008-0062
CRITICAL
MIT Kerberos 5 < 1.6.3 - Denial of Service and Possible Remote Code Execution via Crafted KRB4 Messages
Mar 19, 2008
CVSS 9.8
EPSS 0.10
CVE-2008-0063
HIGH
MIT Kerberos 5 - Information Disclosure via Uninitialized Buffer in KDC Error Message
Mar 19, 2008
CVSS 7.5
EPSS 0.03
CVE-2008-1145
WEBrick <1.8.5-p115, 1.8.6-p114, 1.9-1.9.0-1 - Path Traversal
Mar 04, 2008
EPSS 0.18
CVE-2008-0595
Fedora < 1.0.3 - Incorrect Authorization
Feb 29, 2008
EPSS 0.00
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters