Skip to contentFedoraproject vulnerabilities
Newest
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management,...CVE-2019-18679Fix availableEPSS 43.1%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...CVE-2019-18678Fix available5.3 Medium
- squid-cache squid, canonical ubuntu linux, fedoraproject fedora +2 moreAn issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used ...CVE-2019-18677Fix available6.1 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation,...CVE-2019-18676Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap...CVE-2019-12526Fix availableEPSS 20.3%9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP...CVE-2019-12523Fix available9.1 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle backs up private filesCVE-2012-1156Fix available7.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle before 2.2.2 has a password and web services issue where when the user profile is updated...CVE-2012-11688.2 High
- moodle, debian linux, fedoraproject fedora +1 more +3 moreMoodle has a database activity export permission issue where the export function of the database...CVE-2012-11557.5 High
- artifex ghostscript, fedoraproject fedora, opensuse leap +2 moreA flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure,...CVE-2019-14869Fix available7.3 High
- debian linux, storaged-project udisks, fedoraproject fedora +2 more +4 moreudisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.CVE-2010-46617.8 High
- containers crun, fedoraproject fedora +1 moreAn issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check...CVE-2019-188378.6 High
- mysql-gui-tools, fedoraproject fedora +1 moremysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the...CVE-2010-41775.5 Medium
- alien-arena, debian linux, fedoraproject fedora +2 moreIt is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by...CVE-2010-3439Fix available6.5 Medium
- libpoe-component-irc-perl, debian linux, fedoraproject fedora +2 morelibpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can...CVE-2010-3438Fix available9.8 Critical
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...CVE-2019-14818Fix available7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- tnef project tnef, canonical ubuntu linux, debian linux +1 more +3 moreIn tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file...CVE-2019-18849Fix available5.5 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreA flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission...CVE-2019-14824Fix available6.5 Medium
- redhat tuned, fedoraproject fedora +1 moretuned before 2.x allows local users to kill running processes due to insecure permissions with...CVE-2013-18205.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux...CVE-2019-18808Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in...CVE-2019-18809Fix available4.6 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux...CVE-2019-18811Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at...CVE-2019-18804Fix available7.5 High
- redhat pagure, fedoraproject fedora, redhat enterprise linux +2 morePagure: XSS possible in file attachment endpointCVE-2016-10000376.1 Medium
- mysql-gui-tools, fedoraproject fedora +1 moreMySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of...CVE-2010-41785.5 Medium
- oracle mysql, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2007Fix available3.7 Low
- python software foundation; beanbag djblets, review board, review board board +2 more +4 moreReviewBoard and Djblets library are vulnerable to code executionCVE-2013-4409Fix available9.8 Critical
- sensiolabs symfony, fedoraproject fedora, redhat enterprise linux +2 moreSymfony collectionCascaded and collectionCascadedDeeply fields security bypassCVE-2013-4751Fix available8.1 High
- mantisbt, fedoraproject fedora +1 moreA cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject...CVE-2013-19316.1 Medium
- mantisbt, fedoraproject fedora +1 moreMantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close...CVE-2013-19304.3 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS...CVE-2019-18425Fix available9.8 Critical
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via...CVE-2019-18424Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...CVE-2019-18423Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS...CVE-2019-18421Fix available7.5 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-18420Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...CVE-2019-18422Fix available8.8 High
- systemd project systemd, fedoraproject fedora +1 moresystemd 239 through 243 accepts any certificate signed by a trusted certificate authority for DNS...CVE-2018-21029Fix availableDisputed9.8 Critical
- samba, fedoraproject fedora, opensuse leap +2 moreA flaw was found in samba 4.0.0 until samba 4.10.9. An attacker can crash AD DC LDAP server via...CVE-2019-14847Fix available4.9 Medium
- samba, fedoraproject fedora, opensuse leap +2 moreA flaw was found in Samba, all versions starting samba 4.5.0 until samba 4.9.15, samba 4.10.10,...CVE-2019-14833Fix available4.2 Medium
- samba, fedoraproject fedora +1 moreA flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15,...CVE-2019-10218Fix available5.3 Medium
- golang go, arista cloudvision portal, eos +8 more +10 moreGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...CVE-2019-17596Public exploitFix available7.5 High
- qemu, debian linux, fedoraproject fedora +2 more +4 moreThe ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service ...CVE-2019-120676.5 Medium
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- loofah project loofah, canonical ubuntu linux, debian linux +1 more +3 moreLoofah Allows Cross-site ScriptingCVE-2019-15587Fix available5.4 Medium
- file project file, canonical ubuntu linux, debian linux +3 more +5 morecdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR...CVE-2019-18218Fix available7.8 High
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2019-3018Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported...CVE-2019-3011Fix available6.5 Medium
- Show moreLoading…