Skip to contentFedoraproject Fedora vulnerabilities
- debian linux, fedoraproject fedora, libtiff +2 more +4 moreA stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This...CVE-2022-34526Fix available6.5 Medium
- squirrel-lang squirrel, fedoraproject fedora +1 moresqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the...CVE-2021-41556Fix available10.0 Critical
- clusterlabs booth, debian linux, fedoraproject fedora +2 moreThe authfile directive in the booth config file is ignored, preventing use of authentication in...CVE-2022-2553Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreinsufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...CVE-2022-33745Fix available8.8 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle LTI module reflected XSS riskCVE-2022-35653Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Open redirect risk in mobile auto-login featureCVE-2022-35652Fix available6.1 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle Stored XSS and blind SSRF possible via SCORM track detailsCVE-2022-35651Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Arbitrary file read when importing lesson questionsCVE-2022-35650Public exploitFix availableEPSS 53.7%7.5 High
- moodle, fedoraproject fedora +1 moreMoodle PostScript Code InjectionCVE-2022-35649Public exploitFix available9.8 Critical
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner...CVE-2022-0670Fix available9.1 Critical
- mistune project mistune, fedoraproject fedora +1 moreMistune vulnerable to catastrophic backtrackingCVE-2022-34749Fix available7.5 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...CVE-2021-46829Fix available7.8 High
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2022-21537Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2022-21534Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21531Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21530Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21529Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21528Fix available5.5 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21527Fix available5.5 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21526Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21525Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2022-21522Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2022-21517Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2022-21515Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21509Fix available5.5 Medium
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- wavpack, fedoraproject fedora +1 moreA null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log:...CVE-2022-2476Fix available5.5 Medium
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21549Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21541Fix available5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21540Fix available5.3 Medium
- thenify project thenify, debian linux, fedoraproject fedora +2 moreArbitrary Code ExecutionCVE-2020-7677Fix available8.6 High
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text labelCVE-2022-31160Public exploitFix available6.1 Medium
- go standard library encoding/xml, golang go, fedoraproject fedora +1 more +3 moreStack exhaustion from deeply nested XML documents in encoding/xmlCVE-2022-28131Fix available7.5 High
- autotrace project autotrace, fedoraproject fedora +1 moreAutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input...CVE-2022-32323Fix available7.3 High
- llhttp, nodejs node, node.js +4 more +6 moreThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...CVE-2022-32215Fix availableEPSS 70.2%6.5 Medium
- llhttp, nodejs node, node.js +4 more +6 morellhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-EncodingCVE-2022-32213Fix availableEPSS 44.8%6.5 Medium
- nodejs node, node.js, debian linux +2 more +4 moreA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...CVE-2022-32212Fix available8.1 High
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- debian linux, fedoraproject fedora, intel core i3-6100 firmware +127 more +129 moreArbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)CVE-2022-29901Fix available5.6 Medium
- git, apple xcode, debian linux +1 more +3 moreBypass of safe.directory protections in GitCVE-2022-29187Fix available7.8 High
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreUse after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a...CVE-2022-2296Fix available8.8 High
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreType confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to...CVE-2022-2295Fix available8.8 High
- google chrome, webrtc, apple ipados +9 more +11 moreHeap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker...CVE-2022-2294In KEVFix availableEPSS 70.8%8.8 High
- net-snmp, debian linux, fedoraproject fedora +2 morenet-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.CVE-2022-24810Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24809Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24808Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory accessCVE-2022-24807Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneouslyCVE-2022-24806Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.CVE-2022-24805Fix available6.5 Medium
- Show moreLoading…