Skip to contentFedoraproject Fedora vulnerabilities
- python pillow, debian linux, fedoraproject fedora +2 moreBuffer Overflow in PillowCVE-2021-34552Fix available9.8 Critical
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on public DAV endpointCVE-2021-327055.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on shareinfo endpointCVE-2021-327035.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreApplication specific tokens can change their own scopeCVE-2021-326888.8 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreAudit log is not properly logging unsetting of share expiration dateCVE-2021-326803.3 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreFilenames not escaped by default in controllers using DownloadResponseCVE-2021-326793.5 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreRatelimit not applied on OCS API responsesCVE-2021-326783.7 Low
- fossil-scm fossil, fedoraproject fedora +1 moreFossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS...CVE-2021-36377Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreAn out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in...CVE-2021-3612Fix available7.8 High
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events...CVE-2021-21779Fix available6.8 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the way certain events are processed for ImageLoader...CVE-2021-21775Fix available6.8 Medium
- addressable project addressable, fedoraproject fedora +1 moreRegular Expression Denial of Service in Addressable templatesCVE-2021-32740Fix available7.5 High
- linuxptp project linuxptp, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a...CVE-2021-3571Fix available7.1 High
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...CVE-2021-3570Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...CVE-2021-35197Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreSQL Injection in DjangoCVE-2021-35042Public exploitFix availableEPSS 44.4%9.8 Critical
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...CVE-2021-36087Fix available3.3 Low
- debian linux, selinux project selinux, fedoraproject fedora +19 more +21 moreThe CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...CVE-2021-36086Fix available3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...CVE-2021-36085Fix available3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...CVE-2021-36084Fix available3.3 Low
- djvulibre project djvulibre, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in...CVE-2021-3630Fix available5.5 Medium
- uclouvain openjpeg, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when...CVE-2021-3575Fix available7.8 High
- thephpleague flysystem, fedoraproject fedora +1 moreTime-of-check Time-of-use (TOCTOU) Race Condition in league/flysystemCVE-2021-32708Public exploitFix available9.8 Critical
- dovecot, fedoraproject fedora +1 moreDovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem...CVE-2021-29157Fix available7.5 High
- linux, linux kernel, canonical ubuntu linux +2 more +4 moreIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds...CVE-2021-3600Fix available7.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who...CVE-2021-30557Fix availableEPSS 11.7%8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to...CVE-2021-30556Fix available8.8 High
- google chrome, fedoraproject fedora, google chromium webgl +2 moreUse after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to...CVE-2021-30554In KEVFix available8.8 High
- dovecot, debian linux, fedoraproject fedora +2 moreThe submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp....CVE-2021-33515Fix available4.8 Medium
- dovecot, fedoraproject fedora +1 moreThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as...CVE-2020-28200Fix available4.3 Medium
- mpmath, fedoraproject fedora +1 moreReDOS in MpmathCVE-2021-29063Fix available7.5 High
- gdraheim zziplib, debian linux, fedoraproject fedora +2 moreInfinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the...CVE-2020-18442Fix available3.3 Low
- qemu, debian linux, fedoraproject fedora +2 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior...CVE-2021-3608Fix available6.0 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...CVE-2021-3607Fix available6.0 Medium
- quassel-irc quassel, fedoraproject fedora +1 moreQuassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a...CVE-2021-34825Fix available7.5 High
- phpmailer, fedoraproject fedora +1 moreInclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailerCVE-2021-3603Fix available8.1 High
- phpmailer project phpmailer, fedoraproject fedora +1 moreRemote Code Execution vulnerability in PHPMailer 6.4.1 running on WindowsCVE-2021-34551Fix available8.1 High
- actix actix-http, fedoraproject fedora +1 moreHTTP Request Smuggling in actix-httpCVE-2021-38512Fix available7.5 High
- jdom, apache solr, tika +3 more +5 moreXML External Entity (XXE) Injection in JDOMCVE-2021-33813Fix availableEPSS 19.4%7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote...CVE-2021-30553Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who...CVE-2021-30552Fix available8.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30551In KEVPublic exploitFix availableEPSS 64.7%8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who...CVE-2021-30550Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who...CVE-2021-30549Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30548Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30547Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30546Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker...CVE-2021-30545Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30544Fix available8.8 High
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3595Fix available3.8 Low
- Show moreLoading…