Vulnerabilities > Fedoraproject > Fedora > 33

DATE CVE VULNERABILITY TITLE RISK
2019-08-07 CVE-2019-14733 Out-of-bounds Write vulnerability in multiple products
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
network
low complexity
adplug-project fedoraproject CWE-787
8.8
2019-08-07 CVE-2019-14732 Out-of-bounds Write vulnerability in multiple products
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
network
low complexity
adplug-project fedoraproject CWE-787
8.8
2019-08-06 CVE-2019-14692 Out-of-bounds Write vulnerability in multiple products
AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
network
low complexity
adplug-project fedoraproject CWE-787
8.8
2019-08-06 CVE-2019-14691 Out-of-bounds Write vulnerability in multiple products
AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
network
low complexity
adplug-project fedoraproject CWE-787
8.8
2019-08-06 CVE-2019-14690 Out-of-bounds Write vulnerability in multiple products
AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
network
low complexity
adplug-project fedoraproject CWE-787
8.8
2019-04-22 CVE-2019-11412 Always-Incorrect Control Flow Implementation vulnerability in multiple products
An issue was discovered in Artifex MuJS 1.0.5.
network
low complexity
artifex fedoraproject CWE-670
7.5
2018-11-16 CVE-2018-19296 PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack. 8.8
2018-10-01 CVE-2018-17825 Double Free vulnerability in multiple products
An issue was discovered in AdPlug 2.3.1.
network
low complexity
adplug-project fedoraproject CWE-415
critical
9.8
2018-04-25 CVE-2017-6888 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
local
low complexity
flac-project debian fedoraproject CWE-772
5.5
2018-03-01 CVE-2017-9271 Information Exposure Through Log Files vulnerability in multiple products
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
local
low complexity
opensuse fedoraproject CWE-532
3.3