Skip to contentFedoraproject Fedora vulnerabilities
- m2crypto project m2crypto, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in all released versions of m2crypto, where they are vulnerable to...CVE-2020-25657Fix available5.9 Medium
- sudo project sudo, fedoraproject fedora, netapp hci management node +1 more +3 moreselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to...CVE-2021-23240Fix available7.8 High
- python pillow, fedoraproject fedora +1 morePillow Out-of-bounds ReadCVE-2020-35655Fix available5.4 Medium
- python pillow, fedoraproject fedora +1 morePillow Out-of-bounds WriteCVE-2020-35654Fix available8.8 High
- python pillow, debian linux, fedoraproject fedora +2 morePillow Out-of-bounds ReadCVE-2020-35653Fix available7.1 High
- sudo project sudo, debian linux, fedoraproject fedora +3 more +5 moreThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...CVE-2021-23239Fix available2.5 Low
- debian linux, linux kernel, fedoraproject fedora +2 moreIn drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier...CVE-2020-28374Fix available8.1 High
- cacti, fedoraproject fedora +1 moreAn issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in...CVE-2020-35701Fix available8.8 High
- coturn, fedoraproject fedora +1 moreLoopback bypass in CoturnCVE-2020-26262Fix available7.2 High
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in...CVE-2020-25678Fix available4.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker...CVE-2021-21116Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUser after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote...CVE-2021-21115Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...CVE-2021-21114Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...CVE-2021-21113Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...CVE-2021-21112Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an...CVE-2021-21111Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker...CVE-2021-21110Public exploitFix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who...CVE-2021-21109Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had...CVE-2021-21108Fix available9.6 Critical
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote...CVE-2021-21107Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who...CVE-2021-21106Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a...CVE-2020-16043Fix available8.8 High
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...CVE-2020-8287Public exploitFix availableEPSS 16.3%6.5 Medium
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...CVE-2020-8265Fix available8.1 High
- debian linux, linux kernel, fedoraproject fedora +2 more +4 moremwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux...CVE-2020-36158Fix available8.8 High
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an...CVE-2020-35496Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to...CVE-2020-35495Fix available5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted...CVE-2020-35494Fix available6.1 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreA flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to...CVE-2020-35493Fix available5.5 Medium
- dovecot, debian linux, fedoraproject fedora +2 moreDovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an...CVE-2020-25275Fix available7.5 High
- dovecot, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker...CVE-2020-24386Fix available6.8 Medium
- gnu glibc, broadcom fabric operating system, debian linux +8 more +10 moreThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...CVE-2019-25013Fix available5.9 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff...CVE-2020-35524Fix available7.8 High
- apple ipados, macos, tvos +5 more +7 more"Clear History and Website Data" did not clear the history. The issue was addressed with improved...CVE-2020-29623Fix available3.3 Low
- apache spamassassin, debian linux, fedoraproject fedora +2 moreApache SpamAssassin has an OS Command Injection vulnerabilityCVE-2020-1946Fix available9.8 Critical
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreThere's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is...CVE-2020-27845Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide...CVE-2020-27843Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject extra packages for enterprise linux +8 more +10 moreThere's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to...CVE-2020-27842Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreThere's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker...CVE-2020-27841Fix available5.5 Medium
- wavpack, debian linux, fedoraproject fedora +2 moreWavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an...CVE-2020-35738Fix available6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 morelinkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a...CVE-2020-35730In KEVPublic exploitFix availableEPSS 30.9%6.1 Medium
- xpdfreader xpdf, fedoraproject fedora +1 moreXpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font...CVE-2020-35376Fix available7.5 High
- opensmtpd, fedoraproject fedora +1 moresmtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to...CVE-2020-35679Fix available7.5 High
- opensmtpd, fedoraproject fedora +1 moresmtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote...CVE-2020-35680Fix available7.5 High
- saml project saml, fedoraproject fedora, grafana +3 more +5 moreXML Processing error in github.com/crewjam/samlCVE-2020-27846Fix available9.8 Critical
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace...CVE-2020-35478Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS...CVE-2020-35474Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...CVE-2020-35480Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...CVE-2020-35479Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...CVE-2020-35477Fix available5.3 Medium
- Show moreLoading…