Skip to contentFedoraproject vulnerabilities
Newest
- dovecot, fedoraproject fedora +1 moreThe IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when...CVE-2020-7957Fix available3.1 Low
- dovecot, fedoraproject fedora +1 morelib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8...CVE-2020-7046Fix availableEPSS 51.3%7.5 High
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...CVE-2018-14553Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6416Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6415Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6408Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6406Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6404Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a...CVE-2020-6403Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87...CVE-2020-6402Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6400Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreUse of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6398Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6397Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6396Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6394Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6393Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an...CVE-2020-6392Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87...CVE-2020-6391Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreOut of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6390Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6385Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6382Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...CVE-2020-6381Fix available8.8 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- nghttp2, fedoraproject fedora +1 morenghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).CVE-2016-1544Fix available3.3 Low
- google android, fedoraproject fedora, libexif project libexif +2 moreIn exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an...CVE-2020-0181Public exploitFix available7.5 High
- libvncserver project libvncserver, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain...CVE-2010-53047.5 High
- ipmitool, debian linux, fedoraproject fedora +1 more +3 moreremote code execution vulnerability in ipmitoolCVE-2020-5208Fix available7.7 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- abrt, fedoraproject fedora, redhat automatic bug reporting tool +3 more +5 moreABRT might allow attackers to obtain sensitive information from crash reports.CVE-2011-40887.5 High
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- netty, canonical ubuntu linux, debian linux +3 more +5 moreHTTP Request Smuggling in NettyCVE-2019-20444Fix available9.1 Critical
- netty, apache spark, canonical ubuntu linux +4 more +6 moreHTTP Request Smuggling in NettyCVE-2019-20445Fix availableEPSS 13.8%9.1 Critical
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...CVE-2020-7247In KEVPublic exploitFix availableEPSS 99.0%9.8 Critical
- lldpd project lldpd, debian linux, fedoraproject fedora +2 moreBuffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0...CVE-2015-8011Fix available9.8 Critical
- pyrad, fedoraproject fedora +1 morepyrad is vulnerable to the use of Insufficiently Random ValuesCVE-2013-0294Fix available5.9 Medium
- py-bcrypt, fedoraproject fedora +1 moreImproper Restriction of Excessive Authentication Attempts in py-bcryptCVE-2013-1895Fix available7.5 High
- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905Fix available7.3 High
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...CVE-2020-0549Fix available5.5 Medium
- netty, debian linux, fedoraproject fedora +3 more +5 moreHTTP Request Smuggling in NettyCVE-2020-7238Fix available7.5 High
- qt, fedoraproject fedora +1 moreQt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that...CVE-2015-9541Fix available7.5 High
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreThe ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1...CVE-2019-18222Fix available4.7 Medium
- apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 moreInsecure Deserialization in Apache XML-RPCCVE-2019-17570Public exploitFix availableEPSS 49.3%9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- owasp modsecurity, fedoraproject fedora +1 moreTrustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may,...CVE-2019-19886Fix available7.5 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...CVE-2019-20386Fix available2.4 Low
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- Show moreLoading…