Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6436Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6435Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6434Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6433Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6432Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6431Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6430Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6423Fix available8.8 High
- libssh, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreA flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR ...CVE-2020-1730Fix available5.3 Medium
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in NettyCVE-2020-11612Fix available7.5 High
- convert\ \, fedoraproject fedora +1 moreperl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to...CVE-2013-7488Fix available7.5 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreHeap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker...CVE-2020-6452Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6451Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...CVE-2020-6450Fix available8.8 High
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...CVE-2020-1760Fix available5.8 Medium
- ceph, redhat ceph storage, openshift +2 more +4 moreA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...CVE-2020-1759Fix available6.4 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...CVE-2020-6096Fix available8.1 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +24 more +26 moreLinux kernel bpf verifier vulnerabilityCVE-2020-8835Public exploitFix available7.8 High
- kubernetes, fedoraproject fedora +1 moreKubernetes API server denial of serviceCVE-2020-8552Fix available5.3 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kubelet denial of serviceCVE-2020-8551Fix available4.3 Medium
- pyyaml, fedoraproject fedora, opensuse leap +1 more +3 moreImproper Input Validation in PyYAMLCVE-2020-1747Fix available9.8 Critical
- arm mbed tls, mbed crypto, debian linux +1 more +3 moreArm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)...CVE-2020-10941Fix available5.9 Medium
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in AnsibleCVE-2020-10684Fix available7.9 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 morephpMyAdmin SQL InjectionCVE-2020-10804Fix available8.0 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an...CVE-2020-6425Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10803Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10802Fix available8.0 High
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreA missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide...CVE-2020-81396.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6428Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6427Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...CVE-2020-6426Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6424Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6422Fix available8.8 High
- mozilla bleach, fedoraproject fedora +1 moreBleach vulnerable to mutation XSS via whitelisted math or svg and raw tagCVE-2020-6816Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6449Fix available8.8 High
- rails actionview, debian linux, fedoraproject fedora +1 more +3 morePossible XSS vulnerability in ActionViewCVE-2020-5267Public exploitFix available4.0 Medium
- jsonparser project jsonparser, fedoraproject fedora +1 moreInfinite Loop in jsonparserCVE-2020-10675Fix available7.5 High
- redhat libvirt, debian linux, fedoraproject fedora +2 moreqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...CVE-2019-20485Fix available5.7 Medium
- kde okular, debian linux, fedoraproject fedora +2 moreKDE Okular before 1.10.0 allows code execution via an action link in a PDF document.CVE-2020-9359Fix available5.3 Medium
- golang go, debian linux, fedoraproject fedora +1 more +3 moreHelm uses crypto package vulnerable to panic from malformed X.509 certificateCVE-2020-7919Fix available7.5 High
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small...CVE-2020-6582Fix available7.5 High
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n...CVE-2020-6581Fix available7.3 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in AnsibleCVE-2020-1740Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 morePath Traversal in AnsibleCVE-2020-1735Fix available4.2 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 moreIncorrect Permission Assignment for Critical Resource in AnsibleCVE-2020-1736Fix available2.2 Low
- Show moreLoading…