Fedoraproject

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-8606 2Fedoraproject Gnu 2Fedora Guile May 6, 2026 Jan 12, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
CVE-2016-8605 2Fedoraproject Gnu 2Fedora Guile May 6, 2026 Jan 12, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example,...Show more The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.Show less
CVE-2016-7966 4Debian FedoraprojectKde+1 more 4Debian Linux FedoraKmail+1 more May 6, 2026 Dec 23, 2016 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space int...Show more Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.Show less
CVE-2016-2312 3Fedoraproject KdeOpensuse 4Fedora KscreenlockerLeap+1 more May 6, 2026 Dec 23, 2016 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.
CVE-2016-2334 37 Zip FedoraprojectOracle 37 Zip FedoraSolaris May 6, 2026 Dec 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.
CVE-2016-7953 2Fedoraproject X.org 2Fedora Libxvmc May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.
CVE-2016-7952 2Fedoraproject X.org 2Fedora Libxtst May 6, 2026 Dec 13, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence...Show more X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.Show less
CVE-2016-7951 2Fedoraproject X 2Fedora Libxtst May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks.
CVE-2016-7950 2Fedoraproject X.org 2Fedora Libxrender May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.
CVE-2016-7949 2Fedoraproject X.org 2Fedora Libxrender May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fiel...Show more Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.Show less
CVE-2016-7948 2Fedoraproject X.org 2Fedora Libxrandr May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.
CVE-2016-7947 2Fedoraproject X.org 2Fedora Libxrandr May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.
CVE-2016-7946 2Fedoraproject X.org 2Fedora Libxi May 6, 2026 Dec 13, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.
CVE-2016-7945 2Fedoraproject X.org 2Fedora Libxi May 6, 2026 Dec 13, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.
CVE-2016-7944 2Fedoraproject X.org 2Fedora Libxfixes May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.
CVE-2016-7943 2Fedoraproject X.org 2Fedora Libx11 May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.
CVE-2016-7942 2Fedoraproject X.org 2Fedora Libx11 May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.
CVE-2016-5407 2Fedoraproject X.org 2Fedora Libxv May 6, 2026 Dec 13, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received dat...Show more The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.Show less
CVE-2016-9014 3Canonical DjangoprojectFedoraproject 3Django FedoraUbuntu Linux May 6, 2026 Dec 9, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host heade...Show more Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.Show less
CVE-2016-9013 3Canonical DjangoprojectFedoraproject 3Django FedoraUbuntu Linux May 6, 2026 Dec 9, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attack...Show more Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.Show less

Previous 1...239240241...272 Next