Skip to contentFedoraproject Fedora vulnerabilities
- mediawiki, fedoraproject fedora +1 moreXSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is...CVE-2020-26120Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +8 more +10 morehttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...CVE-2020-26116Fix available7.2 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25828Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreOATHAuth extension in MediaWiki is not implementing rate limitCVE-2020-25827Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25814Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Special:UserRights exposes the existence of hidden usersCVE-2020-25813Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25812Fix available6.1 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...CVE-2020-25603Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of...CVE-2020-25596Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers...CVE-2020-25604Fix available4.7 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when...CVE-2020-25602Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() /...CVE-2020-25601Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32...CVE-2020-25600Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of...CVE-2020-25599Fix available7.0 High
- xen, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource...CVE-2020-25598Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once...CVE-2020-25597Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register...CVE-2020-25595Fix available7.8 High
- containers podman, fedoraproject fedora, redhat enterprise linux +1 more +3 moreInformation disclosure in podmanCVE-2020-14370Fix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote...CVE-2020-6576Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreRace in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had...CVE-2020-6575Fix available8.3 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102...CVE-2020-6574Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote...CVE-2020-6573Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15966Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to...CVE-2020-15965Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15964Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15963Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15962Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15961Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker...CVE-2020-15960Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an...CVE-2020-15959Fix available4.3 Medium
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...CVE-2020-8201Fix available7.4 High
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...CVE-2020-8252Fix available7.8 High
- nodejs node, node.js, fedoraproject fedora +2 moreNode.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests...CVE-2020-8251Fix available7.5 High
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...CVE-2019-20919Fix available4.7 Medium
- microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 moreA buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply...CVE-2020-14393Fix available7.1 High
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2020Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2021-2019Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2016Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2021-2012Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles)....CVE-2021-2009Fix available4.9 Medium
- oracle mysql, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2006Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-1998Fix available3.8 Low
- action view project view, debian linux, fedoraproject fedora +1 more +3 moreXSS in Action ViewCVE-2020-15169Public exploitFix available5.4 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 moreMicrosoft ASP.NET Core Security Feature Bypass VulnerabilityCVE-2020-1045Fix available7.5 High
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration...CVE-2020-25211Fix available6.0 Medium
- cifs-utils, fedoraproject fedora, opensuse leap +2 moreIt was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password,...CVE-2020-14342Fix available4.4 Medium
- debian linux, fedoraproject fedora, zeromq libzmq +2 moreDenial of Service in ZeroMQCVE-2020-15166Fix available7.5 High
- Show moreLoading…