[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj82QFlEJ8MbyhKbxfyN1TLwkmHxHoNxVd8EVmcqjV2Q":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":81,"topProductsByCves":89,"seoMetadata":91,"meta":100},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},18570,"mageia",1,22,2,6,"2017-08-25","m",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},105686,"Mageia is a technology vendor with 1 tracked product and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,28,35,40,48,53,58,65,70,76],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":25,"severity":33,"isKev":34,"epssScore":27},"CVE-2014-3566","The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","2014-10-15",3.4,"Low",false,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":39},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":34,"epssScore":47},"CVE-2014-5461","Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.","2014-09-04",5,"v2","Medium",0.12029,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":34,"epssScore":52},"CVE-2014-9116","The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.","2014-12-02",0.09694,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":34,"epssScore":57},"CVE-2014-8117","softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.","2014-12-17",0.05926,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":45,"severity":63,"isKev":34,"epssScore":64},"CVE-2014-9087","Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S\u002FMIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.","2014-12-01",7.5,"High",0.05661,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":34,"epssScore":69},"CVE-2014-7204","jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.","2014-10-07",0.04824,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":45,"severity":46,"isKev":34,"epssScore":75},"CVE-2014-3429","IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.","2014-08-07",6.8,0.04703,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":34,"epssScore":80},"CVE-2015-2189","Off-by-one error in the pcapng_read function in wiretap\u002Fpcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.","2015-03-08",0.046,[82,87],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":85,"cisaRequiredAction":86},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":36,"description":37,"publishedDate":38,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":39,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":88,"cisaRequiredAction":86},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",[90],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Mageia - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mageia covering 1 product with 22 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mageia vulnerabilities, Mageia security, Mageia CVE, Mageia threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Mageia KEV, Mageia exploited vulnerabilities",{"@context":96,"@type":97,"name":98,"description":93,"url":99},"https:\u002F\u002Fschema.org","Organization","Mageia","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmageia",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":101,"apiVersion":102},"2026-10-17T13:34:04.558Z","3.0"]