Skip to contentFedoraproject Fedora vulnerabilities
- netatalk, western digital my cloud, my cloud home +12 more +14 moreWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in NetatalkCVE-2022-22995Fix available10.0 Critical
- nokogiri, zlib, apple mac os x +28 more +30 moreNokogiri affected by zlib's Out-of-bounds Write vulnerabilityCVE-2018-25032Public exploitFix availableEPSS 51.7%7.5 High
- debian linux, moby, fedoraproject fedora +1 more +3 moreDefault inheritable capabilities for linux container should be emptyCVE-2022-24769Fix available5.9 Medium
- linux kernel, fedoraproject fedora +1 moreA vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the...CVE-2021-4148Fix available5.5 Medium
- redhat 389 directory server, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in the 389 Directory Server that allows expired passwords to access the...CVE-2022-0996Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreIn the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4...CVE-2022-27666Public exploitFix available7.8 High
- openvpn, debian linux, fedoraproject fedora +2 moreOpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...CVE-2022-0547Fix available9.8 Critical
- golang ssh, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moregolang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +27 more +29 moreA flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers...CVE-2022-1011Public exploitFix available7.8 High
- paramiko, debian linux, fedoraproject fedora +2 moreRace Condition in ParamikoCVE-2022-24302Fix available5.9 Medium
- fedoraproject fedora, paypal braintree\/sanitize-url +1 moreCross-site Scripting (XSS)CVE-2021-23648Fix available5.4 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog pluginCVE-2022-24729Fix available6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreCross-site Scripting in CKEditor4CVE-2022-24728Fix available5.4 Medium
- isc bind, fedoraproject fedora, netapp h300e firmware +8 more +10 moreDoS from specifically crafted TCP packetsCVE-2022-0396Fix available5.3 Medium
- isc bind, fedoraproject fedora, juniper junos +9 more +11 moreDNS forwarders - cache poisoning vulnerabilityCVE-2021-25220Fix available6.8 Medium
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- fedoraproject fedora, nicotine-plus nicotine\+ +1 moreNicotine+ DoS on Null Character in Download RequestCVE-2021-45848Fix available7.5 High
- apache http server, debian linux, fedoraproject fedora +1 more +3 moremod_sed: Read/write beyond boundsCVE-2022-23943Public exploitFix availableEPSS 50.4%9.8 Critical
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721Fix availableEPSS 41.9%9.1 Critical
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCVE-2022-22720Public exploitFix availableEPSS 28.2%9.8 Critical
- apache http server, apple mac os x, macos +3 more +5 moremod_lua Use of uninitialized value of in r:parsebodyCVE-2022-22719Fix availableEPSS 69.8%7.5 High
- fishshell fish, debian linux, fedoraproject fedora +1 more +3 moreInjection in fishCVE-2022-20001Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow occurs in vim in vim/vimCVE-2022-0943Fix available8.4 High
- liblouis, apple ipados, iphone os +4 more +6 moreLiblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c ...CVE-2022-26981Fix available7.8 High
- fedoraproject fedora, flippercode wp google map plugin (wordpress plugin), weplugins wp maps +2 moreWordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-256005.4 Medium
- plugin-planet contact form x, fedoraproject fedora, jeff starr contact form x (wordpress plugin) +2 moreWordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2022-256014.7 Medium
- cobbler cobbler/cobbler, cobbler project cobbler, fedoraproject fedora +2 moreImproper Authorization in cobbler/cobblerCVE-2022-0860Fix available8.2 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreOut-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0924Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0909Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in...CVE-2022-0908Fix available7.7 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers...CVE-2022-0907Fix available5.5 Medium
- wavpack, fedoraproject fedora +1 moreAn out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered...CVE-2021-44269Fix available5.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreAn out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote...CVE-2021-32436Fix available6.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreStack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote...CVE-2021-32435Fix available5.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreabcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam...CVE-2021-32434Fix available5.5 Medium
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in graph configuration window of Zabbix FrontendCVE-2022-24919Fix available3.7 Low
- dependencytrack frontend, fedoraproject fedora +1 moreReflected XSS in item configuration window of Zabbix FrontendCVE-2022-24918Fix available3.7 Low
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in service configuration window of Zabbix FrontendCVE-2022-24917Fix available3.7 Low
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in action configuration window of Zabbix FrontendCVE-2022-24349Fix available4.6 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +13 more +15 more.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2022-24512Fix available6.3 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +9 more +11 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-24464Fix available7.5 High
- linux kernel, fedoraproject fedora +1 moreA flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15...CVE-2021-4023Fix available5.5 Medium
- linux kernel, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user...CVE-2022-0433Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreA heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4...CVE-2022-0891Public exploitFix available6.1 Medium
- linux kernel, fedoraproject fedora +1 moreA NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled...CVE-2021-4095Fix available5.5 Medium
- gnu grub2, fedoraproject fedora +1 moreA flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...CVE-2021-3981Fix available3.3 Low
- rust-lang regex, debian linux, fedoraproject fedora +2 moreRegular expression denial of service in Rust's regex crateCVE-2022-24713Public exploitFix availableEPSS 14.5%7.5 High
- cacalabs libcaca, fedoraproject fedora +1 morelibcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user...CVE-2022-0856Fix available6.5 Medium
- httpie, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in httpieCVE-2022-24737Fix available6.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c...CVE-2021-343386.5 Medium
- Show moreLoading…