Skip to contentFedoraproject Fedora vulnerabilities
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted...CVE-2021-20244Fix available5.5 Medium
- apache xmlgraphics commons, fedoraproject fedora +1 moreServer-side request forgery (SSRF) in Apache XmlGraphics CommonsCVE-2020-11988Fix available8.2 High
- openscad, fedoraproject fedora +1 moreA stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl()...CVE-2020-28599Fix available8.8 High
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,...CVE-2021-27645Fix available2.5 Low
- nodejs node, node.js, fedoraproject fedora +11 more +13 moreNode.js badCVE-2021-22884Fix availableEPSS 36.8%7.5 High
- nodejs node, node.js, fedoraproject fedora +7 more +9 moreNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...CVE-2021-22883Fix availableEPSS 77.4%7.5 High
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache BatikCVE-2020-11987Fix availableEPSS 13.6%8.2 High
- cacalabs libcaca, debian linux, fedoraproject fedora +2 moreA flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in...CVE-2021-3410Fix available7.8 High
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...CVE-2021-3407Fix availableEPSS 50.2%5.5 Medium
- matroska libebml, debian linux, fedoraproject fedora +2 moreA flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of...CVE-2021-3405Fix available6.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreA flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c...CVE-2021-26927Fix available5.5 Medium
- mbsync project mbsync, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by...CVE-2021-20247Fix available7.4 High
- jasper project jasper, fedoraproject fedora +1 moreA flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode...CVE-2021-26926Fix available7.1 High
- qemu, debian linux, fedoraproject fedora +5 more +7 moreAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...CVE-2021-20257Fix available6.5 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIncorrect Authorization in PostgreSQLCVE-2021-20229Fix available4.3 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...CVE-2021-20203Fix available3.2 Low
- google chrome, fedoraproject fedora, microsoft edge +1 more +3 moreUse after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote...CVE-2021-21157Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to...CVE-2021-21156Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a...CVE-2021-21155Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote...CVE-2021-21154Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a...CVE-2021-21153Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote...CVE-2021-21152Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to...CVE-2021-21151Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote...CVE-2021-21150Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a...CVE-2021-21149Fix available8.8 High
- reportlab, fedoraproject fedora +1 moreServer-side Request Forgery (SSRF)CVE-2020-28463Fix available6.5 Medium
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreMemory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...CVE-2021-22173Fix available3.7 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreCrash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...CVE-2021-22174Fix available3.7 Low
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend...CVE-2021-26934Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether...CVE-2021-26933Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping...CVE-2021-26932Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net,...CVE-2021-26931Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service...CVE-2021-26930Fix available7.8 High
- gnome gdk-pixbuf, fedoraproject fedora +1 moreA flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out...CVE-2021-20240Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw...CVE-2021-20239Fix available3.3 Low
- isc bind, debian linux, fedoraproject fedora +5 more +7 moreA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2020-8625Fix availableEPSS 65.4%8.1 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...CVE-2021-27219Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...CVE-2021-27218Fix available7.5 High
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- autotrace project autotrace, fedoraproject fedora +1 moreA bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified...CVE-2019-190057.8 High
- autotrace project autotrace, fedoraproject fedora +1 moreA biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to...CVE-2019-190043.3 Low
- fedoraproject fedora, rails https://github.com/rails/rails, rubyonrails rails +2 moreActionpack Open Redirect VulnerabilityCVE-2021-22881Fix availableEPSS 87.3%6.1 Medium
- rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 moreActive Record subject to Regular Expression Denial-of-Service (ReDoS)CVE-2021-22880Public exploitFix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia...CVE-2020-13575Fix available7.5 High
- invisible-island xterm, debian linux, fedoraproject fedora +2 morexterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault...CVE-2021-27135Fix available9.8 Critical
- openvswitch, debian linux, fedoraproject fedora +2 moreA vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...CVE-2020-35498Public exploitFix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...CVE-2020-13578Fix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...CVE-2020-13577Fix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...CVE-2020-13576Fix available9.8 Critical
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...CVE-2020-13574Fix available7.5 High
- Show moreLoading…