Skip to contentFedoraproject Fedora vulnerabilities
- moodle, fedoraproject fedora +1 moreMoodle allowed some users without permission to view other users' full namesCVE-2021-20281Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreCross-site scripting (XSS) and Server side request forgery (SSRF) in moodleCVE-2021-20280Fix available5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle contains Stored XSS via ID number user profile fieldCVE-2021-20279Fix available5.4 Medium
- lynx project lynx, debian linux, fedoraproject fedora +2 moreLynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers...CVE-2021-38165Fix available5.3 Medium
- [unknown] pki-core, dogtagpki, fedoraproject fedora +2 more +4 moreA flaw was found in pki-core. An attacker who has successfully compromised a key could use this...CVE-2021-20179Fix available8.1 High
- linux kernel, fedoraproject fedora, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers...CVE-2021-28375Fix available7.8 High
- python urllib3, fedoraproject fedora, oracle peoplesoft enterprise peopletools +3 more +5 moreUsing default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connectionCVE-2021-28363Fix available6.5 Medium
- gnu gnutls, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in gnutls. A use after free issue in client_send_params in lib/ext...CVE-2021-20232Fix available9.8 Critical
- gnu gnutls, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreA flaw was found in gnutls. A use after free issue in client sending key_share extension may lead...CVE-2021-20231Fix available9.8 Critical
- elementary switchboard-plug-bluetooth, switchboard bluetooth plug, fedoraproject fedora +2 moreIncorrect Authorization in switchboard-plug-bluetoothCVE-2021-21367Fix available6.1 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 moreInsertion of Sensitive Information into Log File in ansibleCVE-2021-20178Fix available5.5 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in...CVE-2020-36281Fix available7.5 High
- leptonica, fedoraproject fedora +1 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to...CVE-2020-36280Fix available7.5 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to...CVE-2020-36279Fix available7.5 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.CVE-2020-36278Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +4 more +6 moreAn issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with...CVE-2021-28153Fix available5.3 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left...CVE-2020-36277Fix available7.5 High
- golang go, fedoraproject fedora +1 morearchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...CVE-2021-27919Fix available5.5 Medium
- debian linux, flatpak, fedoraproject fedora +2 moreSandbox escape via special tokens in .desktop fileCVE-2021-21381Fix available7.1 High
- libjpeg-turbo, fedoraproject fedora +1 moreLibjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability...CVE-2021-20205Fix available6.5 Medium
- 3mf lib3mf, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality...CVE-2021-21772Public exploitFix available8.1 High
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure...CVE-2021-28116Fix availableEPSS 12.9%3.7 Low
- git, apple xcode, debian linux +1 more +3 moremalicious repositories can execute remote code while cloningCVE-2021-21300Public exploitFix availableEPSS 88.5%8.0 High
- pygments, debian linux, fedoraproject fedora +5 more +7 moreInfinite Loop in PygmentsCVE-2021-20270Fix available7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is...CVE-2021-20245Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21190Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21189Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21188Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21187Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72...CVE-2021-21186Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an...CVE-2021-21185Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21184Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21183Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21182Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21181Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21180Fix available8.8 High
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a...CVE-2021-21179Fix available8.8 High
- debian linux, google chrome, fedoraproject fedora +2 moreInappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0...CVE-2021-21178Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21177Fix availableEPSS 17.3%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21176Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21175Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote...CVE-2021-21174Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72...CVE-2021-21173Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389...CVE-2021-21172Fix available8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389...CVE-2021-21171Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...CVE-2021-21170Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote...CVE-2021-21169Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21168Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21167Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21166In KEVFix availableEPSS 24.0%8.8 High
- Show moreLoading…