Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3196Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker...CVE-2022-3195Fix available8.8 High
- dependencytrack frontend, zabbix, fedoraproject fedora +2 moreReflected XSS in the backurl parameter of Zabbix FrontendCVE-2022-40626Fix available4.8 Medium
- kdiskmark project kdiskmark, fedoraproject fedora +1 moreKDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper:...CVE-2022-406737.8 High
- libexpat project libexpat, debian linux, fedoraproject fedora +3 more +5 morelibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674Fix available8.1 High
- moodle, fedoraproject fedora +1 moreMoodle Cross-site Scripting vulnerabilityCVE-2021-36568Fix available5.4 Medium
- microsoft .net, .net core, fedoraproject fedora +10 more +12 more.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2022-38013Fix available7.5 High
- sharkfest foundation wireshark, fedoraproject fedora +1 moreInfinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0...CVE-2022-3190Fix available6.3 Medium
- libconfuse project libconfuse, fedoraproject fedora +1 morecfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.CVE-2022-40320Fix available8.8 High
- moby, fedoraproject fedora +1 moreMoby vulnerability relating to supplementary group permissionsCVE-2022-36109Fix available5.3 Medium
- pdfkit project pdfkit, fedoraproject fedora +1 moreCommand InjectionCVE-2022-25765Public exploitFix availableEPSS 42.5%7.3 High
- oauthlib, fedoraproject fedora +1 moreOAuthLib vulnerable DoS when attacker provides malicious IPV6 URICVE-2022-36087Fix available5.7 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA flaw was found in the Linux kernel. A denial of service flaw may occur if there is a...CVE-2022-3169Fix available5.5 Medium
- python, fedoraproject fedora, redhat enterprise linux +5 more +7 moreA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...CVE-2020-10735Fix available7.5 High
- golang go, fedoraproject fedora +1 moregolang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664Fix available7.5 High
- port389 389-ds-base, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an...CVE-2022-2850Fix available6.5 Medium
- dokuwiki, splitbrain splitbrain/dokuwiki, fedoraproject fedora +2 moreCross-site Scripting (XSS) - Reflected in splitbrain/dokuwikiCVE-2022-3123Fix available5.4 Medium
- gnu pspp, fedoraproject fedora +1 moreAn issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function...CVE-2022-39831Fix available7.8 High
- gnu pspp, fedoraproject fedora +1 moreAn issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function...CVE-2022-39832Fix available7.8 High
- google chrome, fedoraproject fedora, google chromium mojo +2 moreInsufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote...CVE-2022-3075In KEVFix available9.6 Critical
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3099Fix available7.8 High
- libdwarf project libdwarf, fedoraproject fedora +1 morelibdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.CVE-2022-391708.8 High
- samba, fedoraproject fedora +1 moreSamba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which...CVE-2022-32743Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed...CVE-2022-3071Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker...CVE-2022-3058Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a...CVE-2022-3057Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195...CVE-2022-3056Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who...CVE-2022-3055Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a...CVE-2022-3054Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52...CVE-2022-3053Fix available4.3 Medium
- google chrome, fedoraproject fedora, google linux and chrome os +2 moreHeap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195...CVE-2022-3052Fix available8.8 High
- google chrome, fedoraproject fedora, google linux and chrome os +2 moreHeap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52...CVE-2022-3051Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a...CVE-2022-3050Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52...CVE-2022-3049Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0...CVE-2022-3048Fix available6.8 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed...CVE-2022-3047Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who...CVE-2022-3046Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed...CVE-2022-3045Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a...CVE-2022-3044Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52...CVE-2022-3043Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote...CVE-2022-3042Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...CVE-2022-3041Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...CVE-2022-3040Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...CVE-2022-3039Fix available8.8 High
- google chrome, fedoraproject fedora, google chromium network service +2 moreUse after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote...CVE-2022-3038In KEVFix availableEPSS 24.9%8.8 High
- fedoraproject fedora, redhat ansible automation platform, openshift container platform +2 moreAn Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with...CVE-2022-16326.5 Medium
- samba, fedoraproject fedora +1 moreIn Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.CVE-2022-1615Fix available5.5 Medium
- fedoraproject fedora, gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreHeap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows...CVE-2021-3826Fix available6.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreAn issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver...CVE-2022-1247Fix available7.0 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA race condition was found in the Linux kernel's IP framework for transforming packets (XFRM...CVE-2022-3028Fix available7.0 High
- Show moreLoading…