Skip to contentFedoraproject vulnerabilities
Newest
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2755Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-27524.9 Medium
- offis dcmtk, fedoraproject fedora +1 moreOFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code...CVE-2019-1010228Fix available9.8 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +4 more +6 moreThe JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of...CVE-2019-9959Fix available6.5 Medium
- proftpd, debian linux, fedoraproject fedora +1 more +3 moreAn arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code...CVE-2019-12815Public exploitFix availableEPSS 57.3%9.8 Critical
- gnome pango, canonical ubuntu linux, debian linux +10 more +12 moreGnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...CVE-2019-1010238Fix available9.8 Critical
- scapy, fedoraproject fedora +1 moreInfinite Loop in scapyCVE-2019-1010142Fix available7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2805Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2778Fix available5.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2774Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2757Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....CVE-2019-2740Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2739Fix available5.1 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Compiling)....CVE-2019-2738Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +3 more +5 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...CVE-2019-2737Fix available4.9 Medium
- sleuthkit the sleuth kit, the sleuth kit sleuth kit, debian linux +1 more +3 moreThe Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted...CVE-2019-1010065Fix available6.5 Medium
- debian linux, fedoraproject fedora, libsdl +1 more +3 moreSDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in...CVE-2019-13626Fix available6.5 Medium
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and...CVE-2019-13619Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +19 more +21 moreIn the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the...CVE-2019-13272In KEVPublic exploitFix availableEPSS 52.2%7.8 High
- nfdump, debian linux, fedoraproject fedora +2 morenfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range...CVE-2019-1010057Fix available7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are...CVE-2019-9849Public exploitFix available4.3 Medium
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreOffice has a feature where documents can specify that pre-installed scripts can be executed...CVE-2019-9848Public exploitFix availableEPSS 28.9%9.8 Critical
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +10 more +12 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-13616Fix available8.1 High
- libssh2, debian linux, f5 traffix systems signaling delivery controller +4 more +6 moreIn libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c...CVE-2019-13115Public exploitFix availableEPSS 11.7%8.1 High
- jhead, debian linux, fedoraproject fedora +2 morejhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is:...CVE-2019-1010301Fix available5.5 Medium
- jhead, debian linux, fedoraproject fedora +2 morejhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The...CVE-2019-1010302Fix available5.5 Medium
- kyzer libmspack, canonical ubuntu linux, debian linux +1 more +3 morelibmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The...CVE-2019-1010305Fix available5.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...CVE-2019-12527Fix availableEPSS 50.3%8.8 High
- schedmd slurm, debian linux, fedoraproject fedora +1 more +3 moreSchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.CVE-2019-12838Fix available9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...CVE-2019-12529Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...CVE-2019-12525Fix availableEPSS 24.4%9.8 Critical
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...CVE-2019-1010319Fix available5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...CVE-2019-1010317Fix available5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero...CVE-2019-1010315Fix available5.5 Medium
- oniguruma project oniguruma, fedoraproject fedora +1 moreA NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to...CVE-2019-13225Fix available6.5 Medium
- nic knot resolver, cz.nic knot-resolver, fedoraproject fedora +2 moreA vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows...CVE-2019-10191Fix available6.3 Medium
- nic knot resolver, cz.nic knot-resolver, fedoraproject fedora +2 moreA vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0...CVE-2019-10190Fix available5.4 Medium
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreA use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to...CVE-2019-13224Fix available9.8 Critical
- zeromq libzmq, canonical ubuntu linux, debian linux +1 more +3 moreIn ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote,...CVE-2019-13132Public exploitFix availableEPSS 42.5%9.8 Critical
- libosinfo, fedoraproject fedora, redhat enterprise linux +3 more +5 morelibosinfo 1.5.0 allows local users to discover credentials by listing a process, because...CVE-2019-13313Fix available7.8 High
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream:...CVE-2019-132865.5 Medium
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1:...CVE-2019-13283Fix available7.8 High
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform...CVE-2019-132827.8 High
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in...CVE-2019-132817.8 High
- deepin deepin-clone, fedoraproject fedora +1 moredeepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename>...CVE-2019-132267.0 High
- dosbox, debian linux, fedoraproject fedora +2 moreA buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.CVE-2019-7165Fix available9.8 Critical
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects NokogiriCVE-2019-13118Fix available5.3 Medium
- xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 moreUninitialized read in Nokogiri gemCVE-2019-13117Fix available5.3 Medium
- exiv2, fedoraproject fedora +1 moreA WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a...CVE-2019-13111Fix available5.5 Medium
- exiv2, fedoraproject fedora +1 moreAn integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ...CVE-2019-13109Fix available6.5 Medium
- Show moreLoading…