Skip to contentFedoraproject Fedora vulnerabilities
- pypa pipenv, fedoraproject fedora +1 morePipenv's requirements.txt parsing allows malicious index url in commentsCVE-2022-21668Public exploitFix available8.0 High
- vim, vim vim/vim, apple macos +1 more +3 moreUse After Free in vim/vimCVE-2022-0156Fix available6.8 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suiteCVE-2022-01575.2 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0158Fix available6.8 Medium
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...CVE-2021-3997Fix available5.5 Medium
- smarty, debian linux, fedoraproject fedora +2 moreSandbox Escape by math function in smartyCVE-2021-29454Fix available8.1 High
- smarty, debian linux, fedoraproject fedora +2 moreAccess to restricted PHP code by dynamic static class access in smartyCVE-2021-21408Fix available8.8 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated Object Injection in Multisites in WordPressCVE-2022-21663Fix available6.6 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21664Fix available7.4 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21661Public exploitFix availableEPSS 97.8%8.0 High
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46141Fix available5.5 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46142Fix available5.5 Medium
- containerd, fedoraproject fedora +1 moreImproper Preservation of Permissions in containerdCVE-2021-43816Fix available8.0 High
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...CVE-2021-4147Fix available6.5 Medium
- nltk, nltk nltk/nltk, debian linux +1 more +3 moreInefficient Regular Expression Complexity in nltk/nltkCVE-2021-3842Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDirectory-traversal in DjangoCVE-2021-45452Fix available5.3 Medium
- djangoproject django, fedoraproject fedora +1 moreInformation disclosure in DjangoCVE-2021-45116Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDenial-of-service in DjangoCVE-2021-45115Fix available7.5 High
- harfbuzz project harfbuzz, fedoraproject fedora +1 moreHarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from...CVE-2021-459316.5 Medium
- ultrajson project ultrajson, debian linux, fedoraproject fedora +2 moreUltraJSON vulnerable to Out-of-bounds WriteCVE-2021-45958Fix available5.5 Medium
- osgeo gdal, debian linux, fedoraproject fedora +1 more +3 moreGDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile ...CVE-2021-45943Fix available5.5 Medium
- openexr, debian linux, fedoraproject fedora +2 moreOpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:...CVE-2021-45942Fix available5.5 Medium
- debian linux, fedoraproject fedora, qt qtsvg +2 moreQt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate...CVE-2021-45930Fix available5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2021-4193Fix available5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 moreUse After Free in vim/vimCVE-2021-4192Fix available5.5 Medium
- samba, fedoraproject fedora, redhat storage +2 moreMaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670Fix available6.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets...CVE-2021-3623Fix available6.1 Medium
- wireshark, fedoraproject fedora +1 moreLarge loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet...CVE-2021-4190Fix available7.5 High
- wireshark, fedoraproject fedora +1 moreCrash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet...CVE-2021-4186Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...CVE-2021-4185Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows...CVE-2021-4184Fix available7.5 High
- wireshark, fedoraproject fedora, oracle http server +1 more +3 moreCrash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture fileCVE-2021-4183Fix available5.5 Medium
- wireshark, fedoraproject fedora, oracle http server +1 more +3 moreCrash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service...CVE-2021-4182Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreCrash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...CVE-2021-4181Fix available7.5 High
- vim, vim vim/vim, apple mac os x +2 more +4 moreUse After Free in vim/vimCVE-2021-4187Fix available6.8 Medium
- celeryproject celery, fedoraproject extra packages for enterprise linux, fedora +2 moreStored Command InjectionCVE-2021-23727Fix available7.5 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- vim, vim vim/vim, apple mac os x +2 more +4 moreUse After Free in vim/vimCVE-2021-4173Fix available6.8 Medium
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vimCVE-2021-4166Fix available7.1 High
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.CVE-2021-45471Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can...CVE-2021-45472Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit...CVE-2021-45473Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as...CVE-2021-45474Fix available6.1 Medium
- qemu, fedoraproject fedora +1 moreA DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE...CVE-2021-3929Public exploitFix available8.2 High
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...CVE-2021-31566Fix available7.8 High
- debian linux, fedoraproject fedora, libarchive +10 more +12 moreAn improper link resolution flaw while extracting an archive can lead to changing the access...CVE-2021-23177Fix available7.8 High
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819Fix available7.5 High
- containers podman, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podmanCVE-2021-4024Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of...CVE-2021-45469Fix available7.8 High
- gegl, gimp, fedoraproject fedora +1 more +3 moreGEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...CVE-2021-45463Fix available7.8 High
- Show moreLoading…