Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Fedora
CRITICAL 9.8
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
Fedora
MEDIUM 6.5
In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requ…
Fedora
MEDIUM 5.5
Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via …
Fedora
MEDIUM 5.5
Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote…
Fedora
HIGH 7.5
The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via …
Fedora
HIGH 7.5
ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or …
Fedora
HIGH 7.5
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows re…
Fedora
HIGH 7.5
The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by de…
Fedora
HIGH 7.5
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one c…
FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on.
Fedora
HIGH 7.5
elog 3.1.1 allows remote attackers to post data as any username in the logbook.
fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount ope…
Fedora
HIGH 7.5
Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
Fedora
HIGH 7.5
libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).
Fedora
MEDIUM 5.5
The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
Fedora
MEDIUM 5.5
server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key.
Fedora
CRITICAL 9.8
game-music-emu before 0.6.1 mishandles unspecified integer values.
Fedora
MEDIUM 5.5
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
Fedora
CRITICAL 9.8
org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.
Fedora
HIGH 8.8
Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.
Fedora
HIGH 8.1
Session fixation vulnerability in pcsd in pcs before 0.9.157.
Fedora
HIGH 7.8
The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.
Fedora
MEDIUM 5.3
modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Fedora
MEDIUM 5.3
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Fedora
HIGH 7.8
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
Fedora
MEDIUM 5.5
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference)…
Fedora
HIGH 7.8
ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
Fedora
HIGH 7.5
regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to reg…
Fedora
HIGH 7.5
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspe…
Fedora
HIGH 7.5
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified v…