Skip to contentFedoraproject Fedora vulnerabilities
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the...CVE-2021-33287Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2021-33285Fix available7.8 High
- botan project botan, mozilla thunderbird, fedoraproject fedora +2 moreThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...CVE-2021-40529Fix available5.9 Medium
- cryptopp crypto\+\+, fedoraproject fedora +1 moreThe ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during...CVE-2021-40530Fix available5.9 Medium
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3770Fix available8.6 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30624Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Bookmarks in Google Chrome prior to 93.0.4577.63 allowed an attacker who...CVE-2021-30623Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebApp Installs in Google Chrome prior to 93.0.4577.63 allowed an attacker who...CVE-2021-30622Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30621Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInsufficient policy enforcement in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30620Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30619Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in DevTools in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30618Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 morePolicy bypass in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to bypass...CVE-2021-30617Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Media in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30616Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Navigation in Google Chrome prior to 93.0.4577.63 allowed a...CVE-2021-30615Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreHeap buffer overflow in TabStrip in Google Chrome prior to 93.0.4577.63 allowed an attacker who...CVE-2021-30614Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Base internals in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...CVE-2021-30613Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebRTC in Google Chrome on Linux, ChromeOS prior to 93.0.4577.63 allowed an...CVE-2021-30612Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebRTC in Google Chrome on Linux, ChromeOS prior to 93.0.4577.63 allowed an...CVE-2021-30611Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Extensions API in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...CVE-2021-30610Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Sign-In in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30609Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Web Share in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30608Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Permissions in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...CVE-2021-30607Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Blink in Google Chrome prior to 93.0.4577.63 allowed an attacker who convinced...CVE-2021-30606Fix available8.8 High
- python pillow, fedoraproject fedora +1 moreRegular Expression Denial of Service (ReDoS)CVE-2021-23437Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreA race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4...CVE-2021-40490Fix available7.0 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +2 moreURL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidcCVE-2021-39191Fix available4.7 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- cyrus imap, debian linux, fedoraproject fedora +2 moreCyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute...CVE-2021-33582Fix available7.5 High
- element-hq synapse, fedoraproject fedora +1 moreImproper authorisation of /members discloses room membership to non-membersCVE-2021-39164Fix available3.1 Low
- element-hq synapse, fedoraproject fedora +1 moreAdding a private/unlisted room to a community exposes room metadata in an unauthorised manner.CVE-2021-39163Fix available3.1 Low
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- fetchmail, fedoraproject fedora +1 moreFetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such...CVE-2021-39272Fix available5.9 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, fedoraproject fedora +2 moreIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the...CVE-2021-34434Fix available5.3 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28696Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28695Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28694Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moregrant table v2 status pages may remain accessible after de-allocation Guest get permitted access...CVE-2021-28697Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morelong running loops in grant table handling In order to properly monitor resource use, Xen...CVE-2021-28698Fix available5.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreinadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant...CVE-2021-28699Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morexen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to...CVE-2021-28700Fix available4.9 Medium
- squashfs-tools project squashfs-tools, debian linux, fedoraproject fedora +1 more +3 moresquashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry...CVE-2021-40153Fix available8.1 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreCVE-2021-3739 does not affect BellSoft softwareCVE-2021-3739Fix available7.1 High
- libssh, debian linux, fedoraproject fedora +4 more +6 moreA flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two...CVE-2021-3634Fix available6.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 moreAn out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the...CVE-2021-3743Fix available7.1 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30984Fix available7.5 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30954Fix available7.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30953Fix available8.8 High
- apple ipados, macos, safari +9 more +11 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30952In KEVFix available7.8 High
- Show moreLoading…