Skip to contentFedoraproject Fedora vulnerabilities
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in...CVE-2020-11758Fix available5.5 Medium
- openexr, apple icloud, ipados +8 more +10 moreAn issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in...CVE-2020-11759Fix available5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE...CVE-2020-11760Fix available5.5 Medium
- openexr, apple icloud, ipados +8 more +10 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman...CVE-2020-11761Fix available5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in...CVE-2020-11762Fix available5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and...CVE-2020-11763Fix available5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in...CVE-2020-11764Fix available5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the...CVE-2020-11765Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...CVE-2020-11743Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...CVE-2020-11742Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active...CVE-2020-11741Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without...CVE-2020-11740Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...CVE-2020-11739Fix available7.8 High
- git, canonical ubuntu linux, debian linux +2 more +4 moremalicious URLs may cause Git to present stored credentials to the wrong serverCVE-2020-5260Public exploitFix availableEPSS 14.9%9.3 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92...CVE-2020-6456Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6455Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who...CVE-2020-6454Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6448Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6447Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6446Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6445Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6444Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6443Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6442Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6441Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an...CVE-2020-6440Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6439Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an...CVE-2020-6438Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6437Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6436Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6435Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6434Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6433Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6432Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6431Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6430Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6423Fix available8.8 High
- libssh, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreA flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR ...CVE-2020-1730Fix available5.3 Medium
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in NettyCVE-2020-11612Fix available7.5 High
- convert\ \, fedoraproject fedora +1 moreperl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to...CVE-2013-7488Fix available7.5 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreHeap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker...CVE-2020-6452Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6451Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6450Fix available8.8 High
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...CVE-2020-1760Fix available5.8 Medium
- ceph, redhat ceph storage, openshift +2 more +4 moreA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...CVE-2020-1759Fix available6.4 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...CVE-2020-6096Fix available8.1 High
- Show moreLoading…