Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a...CVE-2020-6380Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to...CVE-2020-6379Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to...CVE-2020-6378Fix available8.8 High
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...CVE-2020-7106Fix available6.1 Medium
- redislabs hiredis, debian linux, fedoraproject fedora +2 moreasync.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference...CVE-2020-7105Fix available7.5 High
- wireshark, fedoraproject fedora, opensuse leap +2 more +4 moreIn Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan...CVE-2020-7044Fix available7.5 High
- symantec endpoint detection and response (sedr), endpoint detection and response, fedoraproject fedora +2 moreSymantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross...CVE-2019-19547Public exploit6.1 Medium
- symonics libmysofa, fedoraproject fedora +1 morelibmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the...CVE-2020-6860Fix available8.8 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +9 more +11 moreOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...CVE-2020-6851Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to...CVE-2020-6377Fix available8.8 High
- fedoraproject 389 directory server, hp hp-ux directory server, redhat directory server +2 more389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server...CVE-2010-32823.3 Low
- gnome glib, fedoraproject fedora +1 moreGSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address...CVE-2020-6750Fix available5.9 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- debian linux, python pillow, canonical ubuntu linux +1 more +3 moreUncontrolled Resource Consumption in PillowCVE-2019-19911Fix available7.5 High
- zend framework, fedoraproject fedora, redhat enterprise linux +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow...CVE-2012-4451Fix available6.1 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreInteger overflow in PillowCVE-2020-5310Fix available8.8 High
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreBuffer Copy without Checking Size of Input in PillowCVE-2020-5311Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 morePCX P mode buffer overflow in PillowCVE-2020-5312Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds Read in PillowCVE-2020-5313Fix available7.1 High
- fontforge, fedoraproject fedora, opensuse leap +2 moreFontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.CVE-2020-5395Fix available8.8 High
- sensiolabs symfony, fedoraproject fedora +1 moreSymfony Host Header Injection vulnerability in the HttpFoundation componentCVE-2013-4752Fix available6.1 Medium
- gksu-polkit-0.0.3-6.fc18, gksu-polkit project gksu-polkit, fedoraproject fedora +2 moregksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was...CVE-2013-41617.8 High
- pureftpd pure-ftpd, fedoraproject fedora +1 moreIn Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.CVE-2019-20176Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker...CVE-2019-13767Fix availableEPSS 15.5%8.8 High
- freeciv, fedoraproject fedora +1 moreA denial of service flaw was found in the way the server component of Freeciv before 2.3.4...CVE-2012-5645Fix available7.5 High
- openstack horizon, python-django-horizon, redhat openstack +2 more +4 moreThe file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS...CVE-2012-5474Fix available5.5 Medium
- podofo project podofo, fedoraproject fedora +1 moreThe PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote...CVE-2019-20093Fix available5.5 Medium
- upx, fedoraproject fedora +1 moreA floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95....CVE-2019-20051Fix available5.5 Medium
- upx, fedoraproject fedora +1 moreA heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted...CVE-2019-20021Fix available5.5 Medium
- fedoraproject sssdA flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the...CVE-2012-3462Fix available8.8 High
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling in Waitress: Invalid whitespace characters in headersCVE-2019-16789Fix available7.1 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, debian linux, fedoraproject fedora +1 more +3 moremail() may release string with refcount==1 twiceCVE-2019-110496.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreHeap-buffer-overflow READ in exifCVE-2019-11047Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- php, fedoraproject fedora, tenable security center +2 morelink() silently truncates after a null byte on WindowsCVE-2019-110443.7 Low
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling: LF vs CRLF handling in WaitressCVE-2019-16785Fix available7.1 High
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling: Invalid Transfer-Encoding in WaitressCVE-2019-16786Fix available7.1 High
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.CVE-2019-199177.8 High
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.CVE-2019-199187.8 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- rack, fedoraproject fedora, opensuse leap +2 morePossible Information Leak / Session Hijack Vulnerability in RackCVE-2019-16782Fix available6.3 Medium
- apache software foundation xerces-c, apache xerces-c\+\+, debian linux +8 more +10 moreThe Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during...CVE-2018-1311Public exploitFix available8.1 High
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote...CVE-2019-39966.5 Medium
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL...CVE-2019-3995EPSS 28.5%7.5 High
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after...CVE-2019-39947.5 High
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote...CVE-2019-3993EPSS 45.7%7.5 High
- elog, fedoraproject fedora +1 moreELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote...CVE-2019-39927.5 High
- Show moreLoading…