← Back

Fedora

fedora

Vendor: Fedoraproject • 5,361 CVEs

CVEs (5,361)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-9657
7Canonical
DebianFedoraproject+4 more
12Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+9 more
May 6, 2026
Feb 8, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have uns...Show more
The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.Show less
CVE-2014-9656
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraFreetype+2 more
May 6, 2026
Feb 8, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possib...Show more
The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.Show less
CVE-2014-9636
4Canonical
DebianFedoraproject+1 more
4Debian Linux
FedoraUbuntu Linux+1 more
May 6, 2026
Feb 6, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises...Show more
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.Show less
CVE-2015-1463
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."
CVE-2015-1462
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."
CVE-2015-1461
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."
CVE-2015-1433
2Fedoraproject
Roundcube
2Fedora
Webmail
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the style attribute in an email.
CVE-2014-9328
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
CVE-2014-8630
2Fedoraproject
Mozilla
2Bugzilla
Fedora
May 6, 2026
Feb 1, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and tr...Show more
Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name.Show less
CVE-2014-9639
3Fedoraproject
OpensuseXiph
3Fedora
OpensuseVorbis Tools
May 6, 2026
Jan 23, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.
CVE-2014-9638
3Fedoraproject
OpensuseXiph
3Fedora
OpensuseVorbis Tools
May 6, 2026
Jan 23, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.
CVE-2015-0432
7Canonical
DebianFedoraproject+4 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+11 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.
CVE-2015-0411
6Canonical
DebianFedoraproject+3 more
8Communications Policy Management
Debian LinuxEnterprise Linux+5 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.Show less
CVE-2015-1038
37 Zip
FedoraprojectOracle
3Fedora
P7zipSolaris
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.8 MEDIUM· v2
p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
CVE-2015-0407
5Canonical
DebianFedoraproject+2 more
6Debian Linux
Enterprise LinuxFedora+3 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
CVE-2015-0383
7Canonical
DebianFedoraproject+4 more
10Debian Linux
Enterprise LinuxFedora+7 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.4 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related...Show more
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.Show less
CVE-2015-0382
7Canonical
DebianFedoraproject+4 more
17Communications Policy Management
Debian LinuxEnterprise Linux Desktop+14 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability tha...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.Show less
CVE-2015-0381
7Canonical
DebianFedoraproject+4 more
17Communications Policy Management
Debian LinuxEnterprise Linux Desktop+14 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability tha...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382.Show less
CVE-2015-0374
7Canonical
DebianFedoraproject+4 more
16Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+13 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Forei...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key.Show less
CVE-2014-6568
7Canonical
DebianFedoraproject+4 more
16Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+13 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.