Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker...CVE-2024-5159Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...CVE-2024-5158Fix available8.1 High
- google chrome, fedoraproject fedora +1 moreUse after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...CVE-2024-5157Fix available8.8 High
- linux, linux kernel, fedoraproject fedora +2 morebtrfs: make sure that WRITTEN is set on all metadata blocksCVE-2024-35949Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moredyndbg: fix old BUG_ON in >control parserCVE-2024-35947Fix available5.5 Medium
- qt, qt network authorization, fedoraproject fedora +2 moreQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through...CVE-2024-36048Fix available9.8 Critical
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a...CVE-2024-4950Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to...CVE-2024-4949Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to...CVE-2024-4948Fix available6.5 Medium
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute...CVE-2024-4947In KEVPublic exploitFix availableEPSS 15.2%9.6 Critical
- libreoffice, debian linux, fedoraproject fedora +2 moreGraphic on-click binding allows unchecked script executionCVE-2024-3044Fix available6.5 Medium
- git, debian linux, fedoraproject fedora +2 moreGit's protections for cloning untrusted repositories can be bypassedCVE-2024-32465Fix available7.4 High
- git, debian linux, fedoraproject fedora +2 moreLocal Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directoryCVE-2024-32021Fix available3.9 Low
- git, fedoraproject fedora +1 moreCloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at willCVE-2024-32020Fix available3.9 Low
- git, debian linux, fedoraproject fedora +2 moreGit vulnerable to Remote Code Execution while cloning special-crafted local repositoriesCVE-2024-32004Public exploitFix available8.2 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreOut of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to...CVE-2024-4761In KEVPublic exploitFix availableEPSS 11.0%8.8 High
- wireshark foundation editcap, fedoraproject fedora, wireshark +2 moreUse After Free in editcapCVE-2024-4855Fix available3.6 Low
- wireshark, fedoraproject fedora +1 moreLoop with Unreachable Exit Condition ('Infinite Loop') in WiresharkCVE-2024-4854Fix available6.4 Medium
- wireshark foundation editcap, fedoraproject fedora, wireshark +2 moreMismatched Memory Management Routines in editcapCVE-2024-4853Fix available3.6 Low
- apple ipados, macos, safari +8 more +10 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5,...CVE-2024-27834In KEVFix available5.5 Medium
- cacti, fedoraproject fedora +1 moreAuthentication Bypass when using using older password hashesCVE-2024-34340Fix available9.1 Critical
- cacti, fedoraproject fedora +1 moreCacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in databaseCVE-2024-31460Fix available6.5 Medium
- cacti, fedoraproject fedora +1 moreCacti RCE vulnerability by file include in lib/plugin.phpCVE-2024-31459Fix available8.1 High
- cacti, fedoraproject fedora +1 moreCacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in databaseCVE-2024-31458Fix availableEPSS 12.6%4.6 Medium
- cacti, fedoraproject fedora +1 moreSQL Injection vulnerability in automation_get_new_graphs_sqlCVE-2024-31445Fix availableEPSS 26.2%8.8 High
- cacti, fedoraproject fedora +1 moreCacti XSS vulnerability in lib/html.php by reading dirty data stored in databaseCVE-2024-31444Fix availableEPSS 14.7%4.6 Medium
- cacti, fedoraproject fedora +1 moreCacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in databaseCVE-2024-31443Fix available5.7 Medium
- cacti, fedoraproject fedora +1 moreCacti Cross-site Scripting vulnerability when using JavaScript based messaging APICVE-2024-29894Fix available5.4 Medium
- cacti, fedoraproject fedora +1 moreCacti RCE vulnerability when importing packagesCVE-2024-25641Public exploitFix availableEPSS 86.2%9.1 Critical
- debian linux, linux kernel, fedoraproject fedora +2 morefirewire: nosy: ensure user_length is taken into account when fetching packet contentsCVE-2024-27401Fix available7.8 High
- linux, linux kernel, fedoraproject fedora +2 moredrm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2CVE-2024-27400Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeoutCVE-2024-27399Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: Fix use-after-free bugs caused by sco_sock_timeoutCVE-2024-27398Public exploitFix available8.0 High
- google chrome, chromium, fedoraproject fedora +2 moreUse after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who...CVE-2024-4671In KEVFix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote...CVE-2024-4559Fix available6.5 Medium
- google chrome, apple ipados, iphone os +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to...CVE-2024-4558Fix available9.6 Critical
- gnome glib, debian linux, fedoraproject fedora +7 more +9 moreAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a...CVE-2024-34397Fix available5.2 Medium
- pallets werkzeug, debian linux, fedoraproject fedora +2 moreWerkzeug's improper usage of a pathname and improper CSRF protection results in the remote command executionCVE-2024-34069Public exploitFix available7.5 High
- pallets jinja, fedoraproject fedora +1 moreJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterCVE-2024-34064Public exploitFix available5.4 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7...CVE-2024-34507Fix available7.4 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1...CVE-2024-34502Fix available9.8 Critical
- mediawiki, fedoraproject fedora +1 moreMediaWiki UnlinkedWikibase Cross-site Scripting vulnerabilityCVE-2024-34500Fix available6.1 Medium
- uriparser project uriparser, fedoraproject fedora +1 moreAn issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...CVE-2024-34403Fix available5.9 Medium
- uriparser project uriparser, fedoraproject fedora +1 moreAn issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an...CVE-2024-34402Fix available8.6 High
- pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 moreXSS vulnerability in /settings/store API response json payload in pgAdmin 4CVE-2024-4216Fix available7.4 High
- pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 moreThe Multi Factor Authentication bypass vulnerability in pgAdmin 4CVE-2024-4215Fix available7.4 High
- rjbs email-mime, fedoraproject fedora, rjbs email mime +2 moreAn excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can...CVE-2024-4140Fix available7.5 High
- stb vorbis.c, stb vorbis project vorbis, fedoraproject fedora +1 more +3 moreA heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c...CVE-2023-472129.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to...CVE-2024-4368Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote...CVE-2024-4331Fix available8.8 High
- Show moreLoading…