Skip to contentFedoraproject Fedora vulnerabilities
- gnu screen, debian linux, fedoraproject fedora +2 moreencoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service ...CVE-2021-26937Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...CVE-2021-21148In KEVPublic exploitFix availableEPSS 20.0%8.8 High
- fedoraproject fedora, roundcube webmail +1 moreRoundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences...CVE-2021-26925Fix available5.4 Medium
- symonics libmysofa, fedoraproject fedora +1 moreBuffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows...CVE-2020-36152Fix available8.8 High
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library...CVE-2020-36151Fix available6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will...CVE-2020-36150Fix available6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1...CVE-2020-36149Fix available6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1...CVE-2020-36148Fix available6.5 Medium
- cryptography.io cryptography, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 morePyCA Cryptography symmetrically encrypting large values can lead to integer overflowCVE-2020-36242Fix available9.1 Critical
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local...CVE-2021-21147Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker...CVE-2021-21146Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to...CVE-2021-21145Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker...CVE-2021-21144Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker...CVE-2021-21143Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote...CVE-2021-21142Fix available9.6 Critical
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and...CVE-2020-36241Fix available5.5 Medium
- mechanize project mechanize, debian linux, fedoraproject fedora +2 moreCommand Injection Vulnerability in MechanizeCVE-2021-21289Fix available7.4 High
- palletsprojects jinja, fedoraproject fedora +1 moreRegular Expression Denial of Service (ReDoS)CVE-2020-28493Fix available5.3 Medium
- djangoproject django, fedoraproject fedora, netapp snapcenter +2 moreDjango Directory Traversal via archive.extractCVE-2021-3281Public exploitFix available5.3 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds...CVE-2021-0326Public exploitFix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use...CVE-2021-3347Public exploitFix available7.8 High
- fibranet monitorix, fedoraproject fedora +1 moreMonitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation...CVE-2021-33259.8 Critical
- jasper project jasper, fedoraproject fedora +1 morejp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when...CVE-2021-3272Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest...CVE-2021-3308Fix available5.5 Medium
- golang go, debian linux, fedoraproject fedora +2 more +4 moreIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...CVE-2021-3114Fix available6.5 Medium
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...CVE-2021-3115Fix available7.5 High
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2021Public exploitFix availableEPSS 10.0%4.9 Medium
- oracle mysql, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2011Fix available5.9 Medium
- oracle mysql, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2010Fix available4.2 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....CVE-2021-2002Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2001Fix available4.9 Medium
- mutt, debian linux, fedoraproject fedora +2 morerfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox...CVE-2021-3181Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 more** DISPUTED ** fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export...CVE-2021-3178Fix availableDisputed6.5 Medium
- python, debian linux, fedoraproject fedora +10 more +12 morePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...CVE-2021-3177Fix availableEPSS 24.0%9.8 Critical
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25687Fix availableEPSS 94.0%5.9 Medium
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check...CVE-2020-25686Public exploitFix available3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25685Fix available3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...CVE-2020-25684Fix available3.7 Low
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25683Fix availableEPSS 88.8%5.9 Medium
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the...CVE-2020-25682Fix availableEPSS 75.1%8.1 High
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...CVE-2020-25681Fix availableEPSS 88.3%8.1 High
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +2 moreSDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in...CVE-2020-14410Fix available5.4 Medium
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +1 more +3 moreSDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy...CVE-2020-14409Fix available7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDirectory Traversal in Archive_TarCVE-2020-36193In KEVFix availableEPSS 70.6%7.5 High
- imagemagick, fedoraproject fedora, redhat enterprise linux desktop +2 moreIn ImageMagick versions before 7.0.9-0, there are outside the range of representable values of...CVE-2020-27769Fix available3.3 Low
- erlang erlang\/otp, fedoraproject fedora +1 moreAn issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts...CVE-2020-35733Fix available7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 more +4 moreA NULL pointer dereference flaw was found in the Linux kernel’s GPU Nouveau driver functionality...CVE-2020-25639Fix available4.4 Medium
- openvswitch, fedoraproject fedora, lldpd project lldpd +14 more +16 moreA flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause...CVE-2020-27827Fix available7.5 High
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 3.1 +5 more +7 moreASP.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2021-1723Fix available7.5 High
- Show moreLoading…