mandriva records
8 published records for vendor mandriva.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 62.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-401 Missing Release of Memory after Effective Lifetime1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-668 Exposure of Resource to Wrong Sphere1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2013-4854No exploit | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco Bisc · bind | High7.8 | — | 34.1% | Jul 29, 2013 |
41Plan | CVE-2011-2162No exploit | Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 201ffmpeg · ffmpeg | Critical10.0 | — | 2.3% | May 20, 2011 |
36Monitor | CVE-2007-3915No exploit | Mondo 2.24 has insecure handling of temporary files.mandriva · mondo · CWE-668 | Critical9.1 | — | 1.1% | Nov 7, 2019 |
28Monitor | CVE-2009-0912No exploit | perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings whemandriva · multi network firewall · CWE-20 | High7.2 | — | 0.3% | Mar 16, 2009 |
27Monitor | CVE-2009-0032No exploit | CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users tomandriva · corporate server · CWE-59 | Medium6.9 | — | 0.3% | Jan 27, 2009 |
21Monitor | CVE-2010-2529No exploit | Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to causemandriva · linux | Medium5.0 | — | 3.0% | Jul 28, 2010 |
18Monitor | CVE-2007-3741No exploit | The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (cramandriva · linux | Medium4.3 | — | 2.6% | Aug 27, 2007 |
8Monitor | CVE-2005-3181No exploit | The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function linux · linux kernel · CWE-401 | Low2.1 | — | 0.4% | Oct 12, 2005 |
- CVE-2013-485441Plan
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco B
HighCVSS 7.8No exploitEPSS 34%isc · bindJul 29, 2013
- CVE-2011-216241Plan
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 201
CriticalCVSS 10.0No exploitEPSS 2%ffmpeg · ffmpegMay 20, 2011
- CVE-2007-391536Monitor
Mondo 2.24 has insecure handling of temporary files.
CriticalCVSS 9.1No exploitEPSS 1%mandriva · mondoNov 7, 2019
- CVE-2009-091228Monitor
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings whe
HighCVSS 7.2No exploitEPSS 0%mandriva · multi network firewallMar 16, 2009
- CVE-2009-003227Monitor
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to
MediumCVSS 6.9No exploitEPSS 0%mandriva · corporate serverJan 27, 2009
- CVE-2010-252921Monitor
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause
MediumCVSS 5.0No exploitEPSS 3%mandriva · linuxJul 28, 2010
- CVE-2007-374118Monitor
The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (cra
MediumCVSS 4.3No exploitEPSS 2%mandriva · linuxAug 27, 2007
- CVE-2005-31818Monitor
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function
LowCVSS 2.1No exploitEPSS 0%linux · linux kernelOct 12, 2005