Extra Packages For Enterprise Linux
CVEs (76)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-5540 | Med | 0.24 | 4.7 | 0.02 | Nov 9, 2023 | A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers. | ||
| CVE-2023-5539 | Med | 0.24 | 4.7 | 0.02 | Nov 9, 2023 | A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers. | ||
| CVE-2020-27818 | Low | 0.22 | 3.3 | 0.01 | Dec 8, 2020 | A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability. | ||
| CVE-2020-14394 | Low | 0.21 | 3.2 | 0.00 | Aug 17, 2022 | An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service. | ||
| CVE-2023-5551 | Low | 0.14 | 3.3 | 0.00 | Nov 9, 2023 | Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. | ||
| CVE-2023-5549 | Low | 0.14 | 3.3 | 0.01 | Nov 9, 2023 | Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage. | ||
| CVE-2023-5548 | Low | 0.14 | 3.3 | 0.00 | Nov 9, 2023 | Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection. | ||
| CVE-2023-5545 | Low | 0.14 | 3.3 | 0.01 | Nov 9, 2023 | H5P metadata automatically populated the author with the user's username, which could be sensitive information. | ||
| CVE-2023-5542 | Low | 0.14 | 3.3 | 0.00 | Nov 9, 2023 | Students in "Only see own membership" groups could see other students in the group, which should be hidden. | ||
| CVE-2023-4255 | Med | 0.00 | 5.5 | 0.00 | Dec 21, 2023 | An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to… | ||
| CVE-2023-5341 | Med | 0.00 | 6.2 | 0.00 | Nov 19, 2023 | A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. | ||
| CVE-2023-5543 | Low | 0.00 | 3.3 | 0.00 | Nov 9, 2023 | When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting. | ||
| CVE-2023-34475 | Med | 0.00 | 5.5 | 0.00 | Jun 16, 2023 | A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in… | ||
| CVE-2023-34474 | Med | 0.00 | 5.5 | 0.00 | Jun 16, 2023 | A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a… | ||
| CVE-2022-3213 | Med | 0.00 | 5.5 | 0.00 | Sep 19, 2022 | A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service. | ||
| CVE-2022-32545 | Hig | 0.00 | 7.8 | 0.01 | Jun 16, 2022 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to… |
- risk 0.24cvss 4.7epss 0.02
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.
- risk 0.24cvss 4.7epss 0.02
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.
- risk 0.22cvss 3.3epss 0.01
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
- risk 0.21cvss 3.2epss 0.00
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
- risk 0.14cvss 3.3epss 0.00
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
- risk 0.14cvss 3.3epss 0.01
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
- risk 0.14cvss 3.3epss 0.00
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.
- risk 0.14cvss 3.3epss 0.01
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
- risk 0.14cvss 3.3epss 0.00
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
- risk 0.00cvss 5.5epss 0.00
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to…
- risk 0.00cvss 6.2epss 0.00
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
- risk 0.00cvss 3.3epss 0.00
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
- risk 0.00cvss 5.5epss 0.00
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in…
- risk 0.00cvss 5.5epss 0.00
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a…
- risk 0.00cvss 5.5epss 0.00
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.
- risk 0.00cvss 7.8epss 0.01
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to…
Page 4 of 4