Skip to contentFedoraproject Fedora vulnerabilities
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30951Fix available8.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30936Fix available8.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30934Fix available8.8 High
- apple ipados, macos, tvos +5 more +7 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30890Fix available6.1 Medium
- apple ipados, macos, tvos +5 more +7 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30887Fix available6.5 Medium
- apple ios, ipados, macos +4 more +6 morewebkit2gtk - security updateCVE-2021-30858In KEVPublic exploitFix availableEPSS 13.4%8.8 High
- apple ipados, safari, tvos +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30851Fix available8.8 High
- plib project plib, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreIn Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary...CVE-2021-38714Fix available8.8 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshalingCVE-2021-39150Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshalingCVE-2021-39152Fix availableEPSS 11.4%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream can cause a Denial of ServiceCVE-2021-39140Fix available6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146Fix availableEPSS 14.3%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141Public exploitFix availableEPSS 16.1%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +10 more +12 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39153Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-39144In KEVPublic exploitFix availableEPSS 98.1%8.5 High
- mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1...CVE-2021-37750Fix available6.5 Medium
- gnome libgfbgraph, fedoraproject fedora +1 moreIn GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification...CVE-2021-39358Fix available5.9 Medium
- gnome libzapojit, fedoraproject fedora +1 moreIn GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on...CVE-2021-39360Fix available5.9 Medium
- gnome libgda, fedoraproject fedora +1 moreIn GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on...CVE-2021-39359Fix available5.9 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to...CVE-2021-30604Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreData race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to...CVE-2021-30603Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who...CVE-2021-30602Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who...CVE-2021-30601Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who...CVE-2021-30600Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute...CVE-2021-30599Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute...CVE-2021-30598Fix available8.8 High
- isc bind, fedoraproject fedora, isc bind9 +2 moreA too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in useCVE-2021-25218Fix available7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...CVE-2021-39242Fix available7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2...CVE-2021-39241Fix available5.3 Medium
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...CVE-2021-39240Fix available7.5 High
- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3656Public exploitFix available8.8 High
- fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 moreA flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via...CVE-2021-3621Fix available8.8 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Fix availableEPSS 46.2%7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A...CVE-2021-3635Fix available4.4 Medium
- ckeditor, ckeditor ckeditor4, debian linux +10 more +12 moreExecution of JavaScript code using malformed HTML in ckeditorCVE-2021-37695Fix available7.3 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....CVE-2021-31556Fix available9.8 Critical
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 moreArbitrary HTML injection vulnerability in ckeditorCVE-2021-32809Fix available4.6 Medium
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 moreCross-site scripting in ckeditor via abuse of undo functionalityCVE-2021-32808Fix available7.6 High
- gnu glibc, fedoraproject fedora, oracle communications cloud native core binding support function +8 more +10 moreIn librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c...CVE-2021-38604Fix available7.5 High
- qt, fedoraproject fedora +1 moreQt 5.0.0 through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from...CVE-2021-38593Fix available7.5 High
- postgresql, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory...CVE-2021-3677Fix available6.5 Medium
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before...CVE-2021-00027.1 High
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers...CVE-2021-00044.4 Medium
- Show moreLoading…