Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15968Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15967Fix available8.8 High
- python, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 moreIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...CVE-2020-27619Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, debian linux +6 more +8 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported...CVE-2020-14812Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14794Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14793Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-14791Fix available2.2 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...CVE-2020-14790Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported...CVE-2020-14789Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...CVE-2020-14786Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14785Fix available4.9 Medium
- debian linux, fedoraproject fedora, netapp 7-mode transition tool +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-14779Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14777Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-14776Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-14775Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14773Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14769Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +6 more +8 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported...CVE-2020-14765Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2020-14672Fix available4.9 Medium
- mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 moreA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...CVE-2020-25648Fix available7.5 High
- freetype, google chrome, debian linux +4 more +6 moreHeap buffer overflow in CefSharpCVE-2020-15999In KEVPublic exploitFix availableEPSS 63.9%9.6 Critical
- yubico yubihsm-shell, fedoraproject fedora +1 moreAn issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The...CVE-2020-243887.5 High
- yubico yubihsm-shell, fedoraproject fedora +1 moreAn issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The...CVE-2020-243877.5 High
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow...CVE-2020-24266Fix available7.5 High
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow...CVE-2020-24265Fix available7.5 High
- apple safari, icloud, ipados +5 more +7 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...CVE-2020-9983Fix available8.8 High
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- phpmyadmin, debian linux, fedoraproject fedora +2 more +4 morephpMyAdmin Cross-site Scripting (XSS)CVE-2020-26934Fix available6.1 Medium
- phpmyadmin, debian linux, fedoraproject fedora +2 more +4 morephpMyAdmin SQL injection vulnerabilityCVE-2020-26935Fix availableEPSS 63.7%9.8 Critical
- sympa, debian linux, fedoraproject fedora +2 moreSympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full...CVE-2020-26880Fix available7.8 High
- google chrome, apple ipados, iphone os +7 more +9 moreUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15969Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...CVE-2020-26575Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector...CVE-2020-25863Fix available7.5 High
- wireshark, fedoraproject fedora, opensuse leap +1 more +3 moreIn Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer...CVE-2020-25866Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash....CVE-2020-25862Fix available7.5 High
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer...CVE-2020-26570Fix available5.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer...CVE-2020-26571Fix available5.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow...CVE-2020-26572Fix available5.5 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreA logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users...CVE-2020-82236.5 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- artifex mupdf, debian linux, fedoraproject fedora +2 morefitz/pixmap.c in Artifex MuPDF 1.17.0 has an overflow during pixmap size calculation.CVE-2020-26519Fix available5.5 Medium
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- ruby-lang ruby, webrick, fedoraproject fedora +2 moreWEBRick vulnerable to HTTP Request/Response SmugglingCVE-2020-25613Public exploitFix available7.5 High
- libproxy project libproxy, debian linux, fedoraproject fedora +1 more +3 moreurl.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as...CVE-2020-26154Fix available9.8 Critical
- goxmldsig project goxmldsig, fedoraproject fedora +1 moreSignature Validation Bypass in goxmldsigCVE-2020-15216Fix available5.3 Medium
- carltongibson django-filter, fedoraproject fedora +1 moreDenial of Service vulnerability in django-filterCVE-2020-15225Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreAn information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1...CVE-2020-25869Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25815Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker...CVE-2020-26121Fix available7.5 High
- Show moreLoading…