Skip to contentFedoraproject Fedora vulnerabilities
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreThere is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau...CVE-2021-20292Fix available6.7 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can...CVE-2021-20277Fix available7.5 High
- apple ipados, macos, ios and ipados +5 more +7 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2...CVE-2021-1870In KEVFix available9.8 Critical
- apple macos, tvos, watchos +5 more +7 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS...CVE-2021-1801Fix available6.5 Medium
- apple macos, safari, tvos +6 more +8 moreA port redirection issue was addressed with additional port validation. This issue is fixed in...CVE-2021-1799Fix available6.5 Medium
- apple ipados, macos, tvos +7 more +9 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...CVE-2021-1789In KEVFix availableEPSS 14.0%8.8 High
- apple macos, mac os x, fedoraproject fedora +1 more +3 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS...CVE-2021-1765Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to...CVE-2020-27840Fix available7.5 High
- qemu, debian linux, fedoraproject fedora +1 more +3 moreThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...CVE-2021-3409Fix available5.7 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while...CVE-2021-3392Fix available3.2 Low
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351Fix availableEPSS 82.1%5.4 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21350Fix availableEPSS 15.2%5.3 Medium
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349Public exploitFix availableEPSS 46.8%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348Fix availableEPSS 13.8%5.3 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21347Fix availableEPSS 14.3%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21346Fix availableEPSS 76.4%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-21345Public exploitFix availableEPSS 72.3%5.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21344Fix availableEPSS 76.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343Fix availableEPSS 46.7%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342Fix availableEPSS 50.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +10 more +12 moreXStream can cause a Denial of ServiceCVE-2021-21341Public exploitFix availableEPSS 77.8%7.5 High
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreIn intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on...CVE-2021-28971Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +2 more +4 moreIn drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug...CVE-2021-28972Fix available6.7 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreA race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5...CVE-2021-28964Fix available4.7 Medium
- lxml, debian linux, fedoraproject fedora +2 more +4 morelxml vulnerable to Cross-Site ScriptingCVE-2021-28957Fix available6.1 Medium
- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire...CVE-2021-28952Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU"...CVE-2021-28950Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers...CVE-2021-28951Fix available5.5 Medium
- http-proxy-agent project http-proxy-agent, fedoraproject fedora, redhat enterprise linux +1 more +3 moreResource Exhaustion Denial of Service in http-proxy-agentCVE-2019-10196Fix available9.8 Critical
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileCVE-2021-27906Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-27807Fix available5.5 Medium
- kramdown project kramdown, debian linux, fedoraproject fedora +2 moreRemote code execution in KramdownCVE-2021-28834Fix available9.8 Critical
- busybox, debian linux, fedoraproject fedora +2 moredecompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result...CVE-2021-28831Fix available7.5 High
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreImportant: squid:4 security updateCVE-2020-25097Fix available8.6 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...CVE-2020-27171Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs...CVE-2020-27170Fix available4.7 Medium
- qemu, debian linux, fedoraproject fedora +1 more +3 moreA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...CVE-2021-3416Fix available6.0 Medium
- mediaarea mediainfo, fedoraproject fedora +1 moreMediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib:...CVE-2020-26797Fix available7.5 High
- pygments, debian linux, fedoraproject fedora +2 morePygments vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2021-27291Fix available7.5 High
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and...CVE-2021-28650Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 morertw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5...CVE-2021-28660Fix available8.8 High
- varnish-cache varnish-modules, fedoraproject fedora, varnish-cache varnish-modules klarlack +2 moreVarnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service ...CVE-2021-285434.0 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...CVE-2021-21193In KEVPublic exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote...CVE-2021-21192Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...CVE-2021-21191Fix available8.8 High
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an...CVE-2021-28090Fix available5.3 Medium
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU...CVE-2021-28089Fix available7.5 High
- moodle, fedoraproject fedora +1 moreMissing permission check in MoodleCVE-2021-20283Fix available4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle Bypass email verification secret when confirming account registrationCVE-2021-20282Fix available5.3 Medium
- Show moreLoading…