Skip to contentFedoraproject vulnerabilities
Newest
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1753Fix available5.0 Medium
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1739Fix available3.9 Low
- twisted, canonical ubuntu linux, debian linux +3 more +5 moreImproper Input Validation in TwistedCVE-2020-10108Fix available9.8 Critical
- twisted, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in TwistedCVE-2020-10109Fix available9.8 Critical
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733Fix available5.0 Medium
- ckeditor, fedoraproject fedora, webspellchecker +2 moreA cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4...CVE-2020-94406.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote...CVE-2020-6420Fix available8.8 High
- sleuthkit the sleuth kit, debian linux, fedoraproject fedora +2 moreIn version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow...CVE-2020-10232Fix available9.8 Critical
- ckeditor, drupal, fedoraproject fedora +8 more +10 moreCKEditor 4.0 vulnerability in the HTML Data ProcessorCVE-2020-9281Fix available6.1 Medium
- netkit telnet project telnet, arista eos, debian linux +3 more +5 moreutility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary...CVE-2020-10188Fix availableEPSS 74.3%9.8 Critical
- timeshift project timeshift, canonical ubuntu linux, fedoraproject fedora +2 moreinit_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting...CVE-2020-10174Fix available7.0 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 moreSQL injection in DjangoCVE-2020-9402Fix availableEPSS 24.0%8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- puma, ruby-lang ruby, debian linux +1 more +3 moreHTTP Response Splitting in PumaCVE-2020-5247Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...CVE-2020-6386Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...CVE-2020-6384Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreType confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...CVE-2020-6383Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash....CVE-2020-9428Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could...CVE-2020-9430Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could...CVE-2020-9431Fix available7.5 High
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c...CVE-2020-7043Fix available9.1 Critical
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7042Fix available5.3 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7041Fix available5.3 Medium
- pureftpd pure-ftpd, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been...CVE-2020-9274Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreType confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to...CVE-2020-6418In KEVPublic exploitFix availableEPSS 78.8%8.8 High
- linux kernel, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture...CVE-2020-9391Fix available5.5 Medium
- opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moreOpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in...CVE-2020-8794Public exploitFix availableEPSS 88.9%9.8 Critical
- opensmtpd, canonical ubuntu linux, fedoraproject fedora +2 moreOpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux...CVE-2020-8793Public exploitFix available4.7 Medium
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- mozilla bleach, fedoraproject fedora +1 moreXSS in Bleach when noscript and raw tag whitelistedCVE-2020-6802Fix available6.1 Medium
- sympa, debian linux, fedoraproject fedora +2 moreSympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk...CVE-2020-9369Fix available7.5 High
- pureftpd pure-ftpd, fedoraproject fedora +1 moreAn issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the...CVE-2020-9365Fix available7.5 High
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in RakeCVE-2020-8130Fix available6.4 Medium
- pacman project pacman, fedoraproject fedora +1 morepacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the...CVE-2019-18182Fix available9.8 Critical
- pacman project pacman, fedoraproject fedora +1 morepacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the...CVE-2019-18183Fix available9.8 Critical
- zsh, apple ipados, iphone os +5 more +7 moreIn Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no...CVE-2019-20044Fix available7.8 High
- cacti, debian linux, fedoraproject fedora +2 more +4 moregraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...CVE-2020-8813Public exploitFix availableEPSS 73.9%8.8 High
- mongodb bson, fedoraproject fedora +1 moreBSON rubygem contains potential denial of serviceCVE-2015-4411Fix available7.5 High
- proftpd, debian linux, fedoraproject fedora +4 more +6 moreIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer...CVE-2020-9273Public exploitFix availableEPSS 11.8%8.8 High
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 morearchive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with...CVE-2020-9308Fix available8.8 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +1 more +3 moreA flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs...CVE-2019-20479Fix available6.1 Medium
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6061Fix available7.0 High
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6062Fix available5.9 Medium
- pyyaml, fedoraproject fedora +1 moreDeserialization of Untrusted Data in PyYAMLCVE-2019-20477Fix available9.8 Critical
- horde groupware, debian linux, fedoraproject fedora +2 moreHorde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data,...CVE-2020-8518Public exploitFix availableEPSS 71.7%9.8 Critical
- pcre pcre2, fedoraproject fedora, splunk universal forwarder +2 moreAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...CVE-2019-20454Fix available5.1 Medium
- weechat, debian linux, fedoraproject fedora +2 more +4 moreirc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers...CVE-2020-8955Fix available9.8 Critical
- gpgme project gpgme, fedoraproject fedora, redhat enterprise linux for ibm z systems +6 more +8 moreGPGME Go wrapper contains Use After FreeCVE-2020-8945Fix available7.5 High
- Show moreLoading…