Skip to contentFedoraproject vulnerabilities
Newest
- mixin-deep project mixin-deep, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 morePrototype Pollution in mixin-deepCVE-2019-10746Fix available9.8 Critical
- gnu libextractor, debian linux, fedoraproject fedora +2 moreGNU Libextractor through 1.9 has a heap-based buffer over-read in the function...CVE-2019-15531Fix available6.5 Medium
- apache commons beanutils, nifi, debian linux +57 more +59 moreInsecure Deserialization in Apache Commons BeanutilsCVE-2019-10086Fix availableEPSS 29.1%7.3 High
- google android, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing...CVE-2019-2126Fix available8.8 High
- roundcube webmail, fedoraproject fedora +1 moreRoundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.CVE-2019-15237Fix available7.4 High
- adplug project adplug, fedoraproject fedora +1 moreDouble Free in AdplugCVE-2019-15151Fix available9.8 Critical
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial...CVE-2019-15142Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service...CVE-2019-15143Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers...CVE-2019-15144Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an...CVE-2019-15145Fix available5.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...CVE-2019-12854Fix availableEPSS 11.7%7.5 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient URL encoding flaw in allowed script location checkCVE-2019-9852Fix available7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreLogo global-event script executionCVE-2019-9851Public exploitFix availableEPSS 77.8%9.8 Critical
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient url validation allowing LibreLogo script executionCVE-2019-9850Fix available9.8 Critical
- libtiff, debian linux, fedoraproject fedora +1 more +3 more_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer...CVE-2019-14973Fix available6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 26.3%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 83.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 moreAn issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't...CVE-2019-14934Fix available7.8 High
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 moreThe implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are...CVE-2019-13377Fix available5.9 Medium
- radare radare2, fedoraproject fedora +1 moreIn radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core...CVE-2019-14745Public exploitFix available7.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.CVE-2019-14732Fix available8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.CVE-2019-14733Fix available8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.CVE-2019-14734Fix available8.8 High
- kde kconfig, canonical ubuntu linux, debian linux +5 more +7 moreIn KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...CVE-2019-14744Fix available7.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.CVE-2019-14692Fix available8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.CVE-2019-14691Fix available8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.CVE-2019-14690Fix available8.8 High
- enigmail, fedoraproject fedora +1 moreIn Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub...CVE-2019-14664Fix available6.5 Medium
- sleuthkit the sleuth kit, fedoraproject fedora +1 moreAn issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an...CVE-2019-145329.8 Critical
- redhat 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux server eus +2 moreIt was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17,...CVE-2019-10171Fix available7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreSQL Injection in DjangoCVE-2019-14234Public exploitFix availableEPSS 47.7%9.8 Critical
- freedesktop poppler, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the...CVE-2019-14494Fix available7.5 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +1 more +3 moreXMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.CVE-2019-14464Fix available5.5 Medium
- libmodbus, debian linux, fedoraproject fedora +2 moreAn issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of...CVE-2019-14463Fix available9.1 Critical
- libmodbus, debian linux, fedoraproject fedora +2 moreAn issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of...CVE-2019-14462Public exploitFix available9.1 Critical
- nfdump project nfdump, debian linux, fedoraproject fedora +2 morenfdump 1.6.17 and earlier is affected by an integer overflow in the function...CVE-2019-14459Fix available7.5 High
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- pdfresurrect project pdfresurrect, fedoraproject fedora +1 morePDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with...CVE-2019-14267Public exploitFix available7.8 High
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- docker docker-credential-helpers, canonical ubuntu linux, docker credential helpers +1 more +3 moredocker-credential-helpers before 0.6.3 has a double free in the List functions.CVE-2019-1020014Fix available5.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-27892.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-27854.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2019-27844.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components /...CVE-2019-27804.9 Medium
- Show moreLoading…