CVE-2015-3983
Published May 14, 2015The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensit…
Vendor archive
fedora CVEs
Beta · best-effort7 CVEs tagged to vendor fedora — 1 Critical, 2 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2015-1848
Published May 14, 2015The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie b…
CVE-2012-3500
Published Oct 1, 2012scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) s…
CVE-2008-2929
Published Aug 29, 2008Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Re…
CVE-2008-2930
Published Aug 29, 2008Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and sea…
CVE-2008-3283
Published Aug 29, 2008Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denia…
CVE-2008-3252
Published Jul 21, 2008Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large numbe…
Showing 1-7 of 7 CVEsPage 1 of 1