Skip to contentFedoraproject Fedora vulnerabilities
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- fedoraproject fedora, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreA flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint...CVE-2021-3773Public exploitFix available9.8 Critical
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23804Fix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23803Fix available7.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare2CVE-2022-0559Fix available8.4 High
- medialize medialize/uri.js, uri.js project uri.js, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in medialize/uri.jsCVE-2022-0613Fix available5.3 Medium
- drupal core, drupal, fedoraproject fedora +2 moreDrupal core Denial of Service vulnerabilityCVE-2022-25271Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn issue was discovered in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks...CVE-2022-25258Public exploitFix available4.6 Medium
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 morexmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...CVE-2022-25235Public exploitFix available9.8 Critical
- fedoraproject extra packages for enterprise linux, fedora, prometheus client golang +1 more +3 moreUncontrolled Resource Consumption in promhttpCVE-2022-21698Fix available7.5 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreInfinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0586Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0583Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreUnaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11...CVE-2022-0582Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...CVE-2022-0581Fix available6.3 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreCross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suiteCVE-2022-05716.8 Medium
- zsh, apple mac os x, macos +2 more +4 moreIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output...CVE-2021-45444Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0572Fix availableEPSS 26.5%8.4 High
- puma, rubyonrails rails, debian linux +1 more +3 moreInformation Exposure when using Puma with RailsCVE-2022-23634Fix available8.0 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moredrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.CVE-2022-24958Fix available7.8 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...CVE-2022-0562Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in...CVE-2022-0561Fix available5.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0554Fix available8.4 High
- linux kernel, ovirt node, fedoraproject fedora +27 more +29 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0435Public exploitFix availableEPSS 67.8%8.8 High
- info-zip unzip, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to...CVE-2022-0529Public exploitFix available5.5 Medium
- info-zip unzip, apple mac os x, macos +3 more +5 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of an utf-8 string...CVE-2022-0530Fix available5.5 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +7 more +9 more.NET Denial of Service VulnerabilityCVE-2022-21986Fix available7.5 High
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location Before Start of Buffer in radareorg/radare2CVE-2022-0522Fix available6.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreExposure of Sensitive Information in GrafanaCVE-2022-21713Fix available4.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location After End of Buffer in radareorg/radare2CVE-2022-0521Fix available6.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare2CVE-2022-0520Fix available8.8 High
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreCross Site Request Forgery in GrafanaCVE-2022-21703Fix available6.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreBuffer Access with Incorrect Length Value in radareorg/radare2CVE-2022-0519Fix available6.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare2CVE-2022-0518Fix available6.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreCross site scripting in Grafana proxyCVE-2022-21702Fix available6.5 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare2CVE-2022-0523Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 High
- neutrinolabs xrdp, fedoraproject fedora +1 morePrivilege escalation on xrdpCVE-2022-23613Fix available7.8 High
- twisted, debian linux, fedoraproject fedora +2 moreCookie and header exposure in twistedCVE-2022-21712Fix available7.5 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23947Fix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23946Fix available7.8 High
- symfony twig, debian linux, fedoraproject fedora +2 moreCode injection in TwigCVE-2022-23614Public exploitFix available8.8 High
- gerbv, debian linux, fedoraproject fedora +2 moreAn information disclosure vulnerability exists in the pick-and-place rotation parsing...CVE-2021-40403Fix available5.8 Medium
- gerbv, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the RS-274X aperture definition tokenization...CVE-2021-40401Fix available10.0 Critical
- postgresql jdbc driver, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Class Instantiation when providing Plugin ClassesCVE-2022-21724Fix available7.0 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-0443Fix available8.4 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreNULL Pointer Dereference in radareorg/radare2CVE-2022-0419Fix available5.9 Medium
- mariadb, fedoraproject fedora +1 moreMariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list...CVE-2021-46661Fix available5.5 Medium
- mariadb, fedoraproject fedora +1 moreMariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.CVE-2021-46663Fix available5.5 Medium
- Show moreLoading…