Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who...CVE-2021-4057Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4056Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who...CVE-2021-4055Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote...CVE-2021-4054Fix available6.5 Medium
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4053Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who...CVE-2021-4052Fix available8.8 High
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsCVE-2021-44228In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 moreAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...CVE-2021-4048Fix available9.1 Critical
- debian linux, f5 nginx, fedoraproject fedora +2 more +4 moreALPACA is an application layer protocol content confusion attack, exploiting TLS servers...CVE-2021-3618Fix available7.4 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- calibre-ebook calibre, fedoraproject fedora +1 morecalibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular...CVE-2021-44686Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-4069Fix available7.3 High
- ruby-lang cgi, fedoraproject fedora +1 moreBuffer overrun in CGI.escape_htmlCVE-2021-41816Fix available9.8 Critical
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-4019Fix available7.1 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3984Fix available7.3 High
- keepalived, fedoraproject fedora +1 moreIn Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message...CVE-2021-44225Fix available5.4 Medium
- debian linux, linux kernel, fedoraproject fedora +3 more +5 moreA memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user...CVE-2021-4002Fix available4.4 Medium
- sensiolabs symfony, fedoraproject fedora +1 moreCSV Injection in SymfonyCVE-2021-41270Fix available6.5 Medium
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28709Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28708Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28707Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 moreguests may exceed their designated memory limit When a guest is permitted to have close to 16TiB...CVE-2021-28706Fix available8.6 High
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28705Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28704Fix available8.8 High
- element-hq synapse, fedoraproject fedora +1 morePath traversal in Matrix SynapseCVE-2021-41281Fix available7.5 High
- isync project isync, debian linux, fedoraproject fedora +2 moreA flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a...CVE-2021-44143Fix available9.8 Critical
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Insecure direct object reference (IDOR) in a calendar web serviceCVE-2021-43560Fix available5.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle contains CSRF vulnerabilityCVE-2021-43559Fix available8.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreCross-site Scripting in moodleCVE-2021-43558Fix available6.1 Medium
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...CVE-2021-3935Fix available8.1 High
- xen, fedoraproject fedora +1 morecertain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address...CVE-2021-28710Fix available8.8 High
- gerbv, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability exists in the drill format T-code tool number functionality...CVE-2021-40391Fix available10.0 Critical
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3968Fix available8.0 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3973Fix available7.3 High
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's...CVE-2021-44025Fix available6.1 Medium
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search...CVE-2021-44026In KEVPublic exploitFix availableEPSS 69.9%9.8 Critical
- wireshark, debian linux, fedoraproject fedora +2 moreUncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...CVE-2021-39929Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39926Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39925Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39924Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39922Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39921Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-3974Fix available7.3 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad...CVE-2021-21900Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of...CVE-2021-21899Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of...CVE-2021-21898Fix available8.8 High
- puppet agent, server, fedoraproject fedora +1 more +3 moreUnsafe HTTP Redirect in Puppet Agent and Puppet ServerCVE-2021-27023Fix available9.8 Critical
- puppet, puppet agent, fedoraproject fedora +1 more +3 moreSilent Configuration Failure in Puppet AgentCVE-2021-27025Fix available6.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2...CVE-2021-39928Fix available7.5 High
- Show moreLoading…