Skip to contentFedoraproject Fedora vulnerabilities
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3594Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3593Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3592Fix available3.8 Low
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreNULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Fix availableEPSS 52.1%7.5 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-31812Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileCVE-2021-31811Fix available5.5 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an atta…CVE-2021-229159.8 Critical
- xscreensaver project xscreensaver, fedoraproject fedora +1 moreXScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs....CVE-2021-34557Fix available4.6 Medium
- trusteddomain opendmarc, fedoraproject fedora +1 moreOpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer...CVE-2021-34555Fix available7.5 High
- the fuck project fuck, fedoraproject fedora +1 moreThe Fuck Arbitrary File Deletion via Path TraversalCVE-2021-34363Fix available9.1 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641Fix availableEPSS 51.8%5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflowCVE-2021-26691Fix availableEPSS 68.1%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereferenceCVE-2021-26690Public exploitFix availableEPSS 65.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byteCVE-2020-35452Fix availableEPSS 53.2%7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereferenceCVE-2020-13950Fix availableEPSS 50.0%7.5 High
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connectionsCVE-2019-17567Fix availableEPSS 59.7%5.3 Medium
- debian linux, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreObservable response discrepancy in some Intel(R) Processors may allow an authorized user to...CVE-2021-0089Fix available6.5 Medium
- intel brand verification tool, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreImproper permissions in the installer for the Intel(R) Brand Verification Tool before version 11...CVE-2021-00866.5 Medium
- tiangolo fastapi, fedoraproject fedora +1 moreCross-Site Request Forgery (CSRF) in FastAPICVE-2021-32677Fix available8.2 High
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative execution with Floating-Point Value InjectionCVE-2021-263145.5 Medium
- htmldoc project htmldoc, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf...CVE-2021-26252Fix available7.8 High
- microsoft .net, .net core, fedoraproject fedora +8 more +10 moreASP.NET Core Denial of Service VulnerabilityCVE-2021-31957Fix available5.9 Medium
- ntpsec, fedoraproject fedora +1 morentpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate...CVE-2021-22212Fix available4.0 Medium
- gnupg libgcrypt, debian linux, fedoraproject fedora +8 more +10 moreLibgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...CVE-2021-33560Public exploitFix available7.5 High
- academysoftwarefoundation openexr, fedoraproject fedora +1 moreA heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...CVE-2021-23169Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30543Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30542Fix available8.8 High
- dino, fedoraproject fedora +1 moreDino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new...CVE-2021-33896Fix available5.3 Medium
- debian linux, fedoraproject fedora, isync project isync +2 moreA flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a...CVE-2021-3578Fix available7.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found...CVE-2021-3573Fix available6.4 Medium
- tpm2-software tpm2-tools, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a...CVE-2021-3565Fix available5.9 Medium
- aomedia, fedoraproject fedora +1 moreaom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.CVE-2021-30475Fix available9.8 Critical
- dogtagpki, fedoraproject fedora, oracle linux +9 more +11 moreA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores...CVE-2021-3551Fix available7.8 High
- redis, fedoraproject fedora +1 moreRedis vulnerability in STRALGO LCS on 32-bit systemsCVE-2021-32625Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a...CVE-2021-30540Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77...CVE-2021-30539Fix available5.4 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77...CVE-2021-30538Fix availableEPSS 15.7%4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a...CVE-2021-30537Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...CVE-2021-30536Fix available8.1 High
- google chrome, fedoraproject fedora +1 moreDouble free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...CVE-2021-30535Public exploitFix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a...CVE-2021-30534Fix available6.5 Medium
- google chrome, fedoraproject fedora, google chromium popupblocker +2 moreInsufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a...CVE-2021-30533In KEVFix availableEPSS 16.7%6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77...CVE-2021-30532Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77...CVE-2021-30531Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote...CVE-2021-30530Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30529Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a...CVE-2021-30528Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced...CVE-2021-30527Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30526Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30525Fix available8.8 High
- Show moreLoading…