Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13732Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +6 more +8 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13730Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13729Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreOut of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13728Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreInsufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a...CVE-2019-13727Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreBuffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13726Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13725Fix available8.8 High
- openstack python-keystoneclient, debian linux, fedoraproject fedora +1 more +3 moreInadequate Encryption Strength in python-keystoneclientCVE-2013-2166Fix available9.8 Critical
- libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...CVE-2019-14889Fix available7.1 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14870Fix available5.4 Medium
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14861Fix available5.3 Medium
- virustotal yara, fedoraproject fedora +1 moreOut-of-bounds read in YARACVE-2019-19648Fix available7.8 High
- radare radare2, fedoraproject fedora +1 moreradare2 through 4.0.0 lacks validation of the content variable in the function...CVE-2019-196477.8 High
- htmldoc project htmldoc, debian linux, fedoraproject fedora +2 moreHTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when...CVE-2019-19630Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- polarssl, debian linux, fedoraproject fedora +2 moreA Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak...CVE-2012-21307.4 High
- fedoraproject fedora, sectool +1 moreA Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.CVE-2012-16157.8 High
- cesnet libyang, fedoraproject fedora, redhat enterprise linux +2 moreIn all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way...CVE-2019-19334Fix available8.1 High
- openslp, vmware esxi, horizon daas +14 more +16 moreOpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has...CVE-2019-5544In KEVPublic exploitFix availableEPSS 98.1%9.8 Critical
- ldap-account-manager ldap account manager (lam) pro, ldap account manager, debian linux +1 more +3 moreA Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the...CVE-2012-1115Fix available6.1 Medium
- ldap-account-manager ldap account manager (lam), ldap account manager, debian linux +1 more +3 moreA Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the...CVE-2012-1114Fix available6.1 Medium
- jasig project php-pear-cas, apereo phpcas, debian linux +1 more +3 moreAn Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in...CVE-2012-11055.5 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes API server follows unvalidated redirects from streaming Kubelet endpointsCVE-2018-1002102Fix available2.6 Low
- dnsmasq, fedoraproject fedora +1 moreA vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote...CVE-2019-14834Fix available3.7 Low
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via...CVE-2019-19579Fix available6.8 Medium
- review board board, fedoraproject fedora, reviewboard +2 moreReview Board: URL processing gives unauthorized users access to review listsCVE-2013-44114.3 Medium
- debian shadow, linux, fedoraproject fedora +4 more +6 moreshadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCVE-2013-4235Fix available4.7 Medium
- mom, fedoraproject fedora +1 moremom creates world-writable pid files in /var/runCVE-2012-44807.8 High
- reviewboard, fedoraproject fedora +1 moreReviewBoard: has an access-control problem in REST APICVE-2013-44107.5 High
- djangoproject django, fedoraproject fedora +1 moreDjango allows unintended model editingCVE-2019-19118Fix available6.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreAn issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card...CVE-2019-19479Fix available5.5 Medium
- rabbitmq-c project rabbitmq-c, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...CVE-2019-18609Fix available9.8 Critical
- gnupg, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the way certificate signatures could be forged using collisions found in the...CVE-2019-14855Fix available5.3 Medium
- gnome dia, fedoraproject fedora, opensuse leap +2 moreWhen GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid...CVE-2019-19451Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0,...CVE-2019-14901Fix availableEPSS 16.5%8.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreThe Linux kernel through 5.3.13 on powerpc allows Information Exposure because the Spectre-RSB...CVE-2019-18660Fix available4.7 Medium
- ethz xquest, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA password generation weakness exists in xquest through 2016-06-13.CVE-2016-49802.5 Low
- freeipa, red hat ipa, fedoraproject fedora +2 moreCode injection in FreeIPACVE-2019-14867Fix available8.8 High
- freeipa, red hat ipa, fedoraproject fedora +2 moreFreeIPA logs passwords embedded in commands in calls using batchCVE-2019-10195Fix available5.7 Medium
- proftpd, debian linux, fedoraproject fedora +2 moreAn issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL...CVE-2019-19269Fix available4.9 Medium
- proftpd, fedoraproject fedora +1 moreAn issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the...CVE-2019-19270Fix available7.5 High
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...CVE-2019-19246Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA vulnerability was found in marvell wifi chip driver in Linux kernel. There is a heap-based...CVE-2019-14896Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x...CVE-2019-14895Fix available8.0 High
- libuser, debian linux, fedoraproject fedora +1 more +3 morelibuser has information disclosure when moving user's home directoryCVE-2012-5644Fix available5.5 Medium
- libuser, fedoraproject fedora, redhat enterprise linux +2 morelibuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and...CVE-2012-5630Fix available6.3 Medium
- gksu-polkit, fedoraproject fedora +1 moregksu-polkit: permissive PolicyKit policy configuration file allows privilege escalationCVE-2012-56177.8 High
- gnome gnome-system-log, fedoraproject fedora +1 moregnome-system-log polkit policy allows arbitrary files on the system to be readCVE-2012-55357.5 High
- kubernetes cri-o, fedoraproject fedora, redhat openshift container platform +2 moreA flaw was found in cri-o, as a result of all pod-related processes being placed in the same...CVE-2019-14891Fix available5.0 Medium
- red hat 389-ds-base, fedoraproject 389 directory server +1 moreA flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose...CVE-2019-10224Fix available4.3 Medium
- Show moreLoading…