Skip to contentFedoraproject Fedora vulnerabilities
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44488Fix available7.5 High
- composer, debian linux, fedoraproject fedora +2 moreRemote Code Execution via web-accessible composer.pharCVE-2023-43655Fix available6.4 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...CVE-2023-5187Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...CVE-2023-5186Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A...CVE-2023-39928Fix available8.8 High
- neutrinolabs xrdp, fedoraproject fedora +1 moreUnchecked access to font glyph info in xrdpCVE-2023-42822Fix available4.6 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS...CVE-2023-41074Fix available8.8 High
- element-hq synapse, fedoraproject fedora +1 moreImproper validation of receipts allows forged read receipts in matrix synapseCVE-2023-42453Fix available3.1 Low
- element-hq synapse, fedoraproject fedora +1 moreTemporary storage of plaintext passwords during password changes in matrix synapseCVE-2023-41335Fix available3.7 Low
- aes-gcm project aes-gcm, rustcrypto aeads, fedoraproject fedora +2 moreAEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failureCVE-2023-42811Fix available4.7 Medium
- pgadmin, pgadmin 4, fedoraproject fedora +2 morePgadmin4: remote code execution by an authenticated userCVE-2023-5002Fix available6.0 Medium
- apple macos, ipad os, ipados +13 more +15 moreThe issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura...CVE-2023-41993In KEVPublic exploitFix availableEPSS 23.7%8.8 High
- snapview tungstenite, fedoraproject fedora +1 moreTungstenite allows remote attackers to cause a denial of serviceCVE-2023-43669Fix available7.5 High
- openprinting cups, libppd, debian linux +1 more +3 moreOpenPrinting CUPS/libppd Postscript Parsing Heap OverflowCVE-2023-4504Public exploitFix available7.0 High
- isc bind, bind 9, debian linux +6 more +8 morenamed may terminate unexpectedly under high DNS-over-TLS query loadCVE-2023-4236Fix available7.5 High
- isc bind, bind 9, debian linux +1 more +3 moreA stack exhaustion flaw in control channel code may cause named to terminate unexpectedlyCVE-2023-3341Fix available7.5 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- artifex ghostscript, fedoraproject fedora +1 moreIn Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution...CVE-2023-43115Public exploitFix available8.8 High
- gnome gnome-shell, fedoraproject fedora +1 moreGnome-shell: screenshot tool allows viewing open windows when session is lockedCVE-2023-43090Fix available5.5 Medium
- curl, fedoraproject fedora, microsoft windows 10 1809 +7 more +9 moreWhen curl retrieves an HTTP response, it stores the incoming headers so that
they can be accessed...CVE-2023-38039Public exploitFix availableEPSS 56.2%7.5 High
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4909Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62...CVE-2023-4908Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62...CVE-2023-4907Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4906Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote...CVE-2023-4905Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4904Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0...CVE-2023-4903Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote...CVE-2023-4902Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote...CVE-2023-4901Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62...CVE-2023-4900Fix available4.3 Medium
- google chrome, libwebp, bandisoft honeyview +10 more +12 moreDuplicate Advisory: Bundled libwebp in Pillow vulnerableCVE-2023-4863In KEVPublic exploitFix availableEPSS 100.0%8.8 High
- libvips, fedoraproject fedora +1 morePotential segfault due to NULL pointer dereference in libvipsCVE-2023-40032Fix available5.5 Medium
- openpmix, debian linux, fedoraproject fedora +2 moreOpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of...CVE-2023-41915Fix available8.1 High
- cacti, fedoraproject fedora +1 moreStored Cross-Site-Scripting on reports_admin.php device name in CactiCVE-2023-39511Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to...CVE-2023-4762In KEVPublic exploitFix availableEPSS 41.4%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote...CVE-2023-4761Fix available8.1 High
- cacti, fedoraproject fedora +1 moreInsecure Deserialization in CactiCVE-2023-30534Fix available4.3 Medium
- cacti, fedoraproject fedora +1 moreAuthenticated command injection in SNMP options of a DeviceCVE-2023-39362Public exploitFix availableEPSS 84.8%7.2 High
- cacti, fedoraproject fedora +1 moreOpen redirect in change password functionality in CactiCVE-2023-39364Fix available3.5 Low
- cacti, fedoraproject fedora +1 moreStored Cross-Site-Scripting on data_sources.php debug html-block in CactiCVE-2023-39516Fix available6.1 Medium
- cacti, fedoraproject fedora +1 moreUnchecked regular expressions can lead to SQL Injection and data leakage in CactiCVE-2023-39365Fix available4.6 Medium
- cacti, fedoraproject fedora +1 moreA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in CactiCVE-2023-39357Fix available8.8 High
- cacti, fedoraproject fedora +1 moreAuthenticated SQL injection vulnerability in reports_user.php in CactiCVE-2023-39358Fix available8.8 High
- Show moreLoading…