Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Fedora
(Fedoraproject)Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2015-05-12 | CVE-2015-1858 | Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image. | Qt, Fedora, Qt | N/A | ||
2015-05-12 | CVE-2015-1859 | Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image. | Qt, Fedora, Qt | N/A | ||
2015-05-12 | CVE-2015-1860 | Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image. | Qt, Fedora, Qt | N/A | ||
2014-05-08 | CVE-2014-0190 | The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image. | Ubuntu_linux, Fedora, Opensuse, Qt | N/A | ||
2017-08-22 | CVE-2015-5258 | Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3. | Fedora, Spring_social | 8.8 | ||
2019-11-25 | CVE-2012-5617 | gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation | Fedora, Gksu\-Polkit | 7.8 | ||
2019-12-31 | CVE-2013-4161 | gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue. | Fedora, Gksu\-Polkit | 7.8 | ||
2008-07-18 | CVE-2008-3218 | Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified OpenID values. | Drupal, Fedora | N/A | ||
2007-10-19 | CVE-2007-5594 | Drupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote attackers to delete users via a cross-site request forgery (CSRF) attack. | Drupal, Fedora | N/A | ||
2007-10-19 | CVE-2007-5593 | install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified. | Drupal, Fedora | N/A |