Skip to contentFedoraproject Fedora vulnerabilities
- fedoraproject fedora, redhat 389 directory server, directory server +1 more +3 moreAn access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that...CVE-2022-1949Fix available7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-1942Fix available7.8 High
- bottlepy bottle, debian linux, fedoraproject fedora +2 moreDenial of service in bottleCVE-2022-31799Fix available9.8 Critical
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in vim/vimCVE-2022-1927Fix available7.8 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreWith shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If...CVE-2022-1789Fix available6.8 Medium
- liblouis, fedoraproject fedora +1 moreLiblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as...CVE-2022-31783Fix available5.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse After Free in vim/vimCVE-2022-1898Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Write in vim/vimCVE-2022-1897Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in...CVE-2022-30789Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G...CVE-2022-30788Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreAn integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G...CVE-2022-30787Fix available6.7 Medium
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G...CVE-2022-30786Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary...CVE-2022-30785Fix available6.7 Medium
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through...CVE-2022-30784Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreAn invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic...CVE-2022-30783Fix available6.7 Medium
- apple macos, cups, mac os x +2 more +4 moreA logic issue was addressed with improved state management. This issue is fixed in Security...CVE-2022-26691Fix available6.7 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2022-1886Fix available7.1 High
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows...CVE-2022-1355Fix available6.1 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Read in vim/vimCVE-2022-1851Fix available7.8 High
- logrotate project logrotate, fedoraproject fedora +1 moreA vulnerability was found in logrotate in how the state file is created. The state file is used...CVE-2022-1348Fix available6.5 Medium
- halibut project halibut, fedoraproject fedora +1 moreA use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a...CVE-2021-42614Fix available7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of...CVE-2021-42613Fix available7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a...CVE-2021-42612Fix available7.8 High
- jpadilla pyjwt, fedoraproject fedora +1 moreKey confusion through non-blocklisted public key formats in PyJWTCVE-2022-29217Fix available7.4 High
- golang go, fedoraproject fedora, netapp beegfs csi driver +2 moregolang.org/x/sys/unix has Incorrect privilege reporting in syscallCVE-2022-29526Fix available5.3 Medium
- smarty, debian linux, fedoraproject fedora +2 morePHP Code Injection by malicious block or filename in SmartyCVE-2022-29221Public exploitFix available8.8 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreIncorrect Calculation in moodleCVE-2022-30600Public exploitFix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreSQL injection in moodleCVE-2022-30599Fix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information in moodleCVE-2022-30598Fix available4.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExternal Control of Assumed-Immutable Web Parameter in moodleCVE-2022-30597Fix available5.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreCross-site Scripting in moodleCVE-2022-30596Fix available5.4 Medium
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA use after free in the Linux kernel File System notify functionality was found in the way user...CVE-2022-1998Fix available7.8 High
- artifex mujs, debian linux, fedoraproject fedora +2 moreIn Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as...CVE-2022-30975Fix available5.5 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 morecompile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...CVE-2022-30974Fix available5.5 Medium
- linuxfoundation runc, fedoraproject fedora +1 moreIncorrect Default Permissions in runcCVE-2022-29162Fix available5.9 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in vim/vimCVE-2022-1769Fix available6.6 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-1733Fix available6.6 Medium
- redhat ignition, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIgnition config accessible to unprivileged software on VMwareCVE-2022-1706Fix available6.5 Medium
- denx u-boot, fedoraproject fedora +1 morenfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...CVE-2022-30767Fix available9.8 Critical
- vim, vim vim/vim, apple macos +2 more +4 moreBuffer Over-read in function grab_file_name in vim/vimCVE-2022-1720Fix available6.6 Medium
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1587Fix available9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreURL Restriction Bypass in plantuml/plantumlCVE-2022-13797.2 High
- dokuwiki, fedoraproject fedora +1 moreHTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS)...CVE-2022-28919Fix available6.1 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreNULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vimCVE-2022-1674Fix available6.6 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing...CVE-2022-1623Fix available5.5 Medium
- libtiff, apple iphone os, macos +4 more +6 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing...CVE-2022-1622Fix available5.5 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +9 more +11 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-29145Fix available7.5 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +9 more +11 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-29117Public exploitFix available7.5 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +14 more +16 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-23267Fix available7.5 High
- Show moreLoading…