Skip to contentFedoraproject Fedora vulnerabilities
- cisco amp for endpoints, clam antivirus, canonical ubuntu linux +3 more +5 moreCisco AMP for Endpoints and ClamAV Privilege Escalation VulnerabilityCVE-2020-3350Fix available5.5 Medium
- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in PythonCVE-2020-14422Fix availableEPSS 12.7%5.9 Medium
- golang text, fedoraproject fedora +1 moregolang.org/x/text Infinite loopCVE-2020-14040Fix available7.5 High
- cacti, fedoraproject fedora +1 moreA SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...CVE-2020-14295Public exploitFix availableEPSS 86.1%7.2 High
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- fedoraproject fedora, tiny-http project tiny-http +1 moreHTTP Request smuggling in tiny_httpCVE-2020-35884Fix available6.5 Medium
- barton ngircd, debian linux, fedoraproject fedora +2 moreThe Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access,...CVE-2020-14148Fix available7.5 High
- libemf project libemf, fedoraproject fedora +1 moreScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an...CVE-2020-13999Fix available5.5 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS via media attachment page in WordPressCVE-2020-4047Fix available6.8 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreOpen redirect in wp_validate_redirect() in WordPressCVE-2020-4048Fix available5.7 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated self-XSS via theme uploads in WordPressCVE-2020-4049Fix available2.4 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreset-screen-option filter misuse by plugins leading to privilege escalation in WordPressCVE-2020-4050Fix available3.5 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS through embed block in WordPressCVE-2020-4046Fix available5.4 Medium
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the...CVE-2017-9109Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a...CVE-2017-9108Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with...CVE-2017-9107Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general...CVE-2017-9106Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks...CVE-2017-9105Fix available8.8 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop...CVE-2017-9104Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from...CVE-2017-9103Fix available9.8 Critical
- kata containers containers, katacontainers runtime, fedoraproject fedora +2 moreKata Containers - Guests can trick the kata-runtime into mounting the container image on any host pathCVE-2020-2026Fix available7.8 High
- nagios, fedoraproject fedora +1 moreNagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for...CVE-2020-13977Fix available4.9 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include...CVE-2020-13964Fix available6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS...CVE-2020-13965In KEVPublic exploitFix availableEPSS 76.6%6.1 Medium
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...CVE-2020-0543Fix available5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...CVE-2020-0198Public exploitFix available7.5 High
- mumble, qt, fedoraproject fedora +1 more +3 moreQt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products,...CVE-2020-13962Fix available7.5 High
- [red hat] networkmanager, fedoraproject fedora +1 moreIt was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...CVE-2020-10754Fix available4.3 Medium
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...CVE-2020-12695Public exploitFix availableEPSS 15.2%7.5 High
- libreoffice, fedoraproject fedora, opensuse leap +2 moreXForms submissions could overwrite local filesCVE-2020-12803Fix available6.5 Medium
- libreoffice, fedoraproject fedora, opensuse leap +2 moreremote graphics contained in docx format retrieved in 'stealth mode'CVE-2020-12802Fix available5.3 Medium
- debian linux, linuxtv xawtv, canonical ubuntu linux +3 more +5 moreAn issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does...CVE-2020-13696Fix available4.4 Medium
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- targetcli-fb project targetcli-fb, fedoraproject fedora +1 moreOpen-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup...CVE-2020-13867Fix available5.5 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kube-controller-manager SSRFCVE-2020-8555Fix available6.3 Medium
- postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 moreImproper Restriction of XML External Entity ReferenceCVE-2020-13692Fix available7.7 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...CVE-2020-10757Public exploitFix available7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 more +4 moreServer Side Request Forgery in GrafanaCVE-2020-13379Public exploitFix availableEPSS 99.9%8.2 High
- red hat containernetworking/plugins, fedoraproject fedora, linuxfoundation cni network plugins +2 more +4 morecontainernetworking/plugins vulnerable to MitM attacksCVE-2020-10749Public exploitFix available6.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- systemd project systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moresystemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x...CVE-2020-13776Fix available6.7 Medium
- nghttp2, debian linux, fedoraproject fedora +7 more +9 moreDenial of service in nghttp2CVE-2020-11080Fix available3.7 Low
- znc, fedoraproject fedora +1 moreZNC 1.8.0 up to 1.8.1-rc1 allows attackers to trigger an application crash (with a NULL pointer...CVE-2020-13775Fix available6.5 Medium
- docker engine, broadcom sannav, debian linux +1 more +3 moreImproper Input Validation in Docker EngineCVE-2020-13401Public exploitFix available6.0 Medium
- python-rsa project python-rsa, canonical ubuntu linux, fedoraproject fedora +2 morePython-RSA decryption of ciphertext leads to DoSCVE-2020-13757Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft softwareCVE-2020-12723Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft softwareCVE-2020-10878Fix available8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft softwareCVE-2020-10543Fix availableEPSS 11.3%8.2 High
- Show moreLoading…