Skip to contentFedoraproject Fedora vulnerabilities
- vim, fedoraproject fedora +1 moreoverflow with count for :s command in vimCVE-2023-48233Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in nv_z_get_count in vimCVE-2023-48234Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in ex address parsing in vimCVE-2023-48235Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in get_number in vimCVE-2023-48236Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in shift_line in vimCVE-2023-48237Fix available2.8 Low
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker...CVE-2023-6112Fix availableEPSS 24.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote...CVE-2023-5997Fix available8.8 High
- kubernetes, fedoraproject fedora, kubernetes kubelet +2 moreKubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalationCVE-2023-5528Fix available7.2 High
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUse after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory...CVE-2023-46850Fix available9.8 Critical
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUsing the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows...CVE-2023-46849Fix available7.5 High
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read printing error messagesCVE-2023-40546Fix available6.2 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: duplicating a bigbluebutton activity assigns the same meeting idCVE-2023-5543Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: forum summary report shows students from other groups when in separate groups modeCVE-2023-5551Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: rce due to lfi risk in some misconfigured shared hosting environmentsCVE-2023-5550Fix available6.5 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: insufficient capability checks when updating the parent of a course categoryCVE-2023-5549Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: cache poisoning risk with endpoint revision numbersCVE-2023-5548Fix available3.3 Low
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: xss risk when previewing data in course upload toolCVE-2023-5547Fix available3.3 Low
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: stored xss in quiz grading report via user id numberCVE-2023-5546Public exploitFix available4.3 Medium
- moodle h5p, moodle, fedoraproject extra packages for enterprise linux +1 more +3 moreMoodle: auto-populated h5p author name causes a potential information leakCVE-2023-5545Fix available3.3 Low
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: stored xss and potential idor risk in wiki commentsCVE-2023-5544Fix available6.5 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: students can view other users in "only see own membership" groupsCVE-2023-5542Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: authenticated remote code execution risk in imscpCVE-2023-5540Fix available4.7 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: authenticated remote code execution risk in lessonCVE-2023-5539Fix available4.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()CVE-2023-39198Fix available7.5 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()CVE-2023-39197Fix available4.0 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to...CVE-2023-5996Fix available8.8 High
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: out-of-bounds read in myeid driver handling encryption using symmetric keysCVE-2023-4535Fix available4.5 Medium
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content...CVE-2023-47272Fix available6.1 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in parse_lease_state()CVE-2023-1194Fix available7.1 High
- python pillow, fedoraproject fedora +1 morePillow Denial of Service vulnerabilityCVE-2023-44271Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5859Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed...CVE-2023-5858Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5857Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5856Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5855Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5854Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5853Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5852Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5851Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5850Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to...CVE-2023-5849Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5482Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5480Fix available6.1 Medium
- element-hq synapse, fedoraproject fedora +1 moreSynapse vulnerable to leak of remote user device informationCVE-2023-43796Fix available5.3 Medium
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...CVE-2023-34058Fix available7.1 High
- apple ipados, macos, safari +6 more +8 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...CVE-2023-42852Fix available8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...CVE-2023-41983Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...CVE-2023-5472Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +6 more +8 moreXorg-x11-server: use-after-free bug in destroywindowCVE-2023-5380Fix available4.7 Medium
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- Show moreLoading…