Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an...CVE-2020-6476Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6475Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...CVE-2020-6474Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6473Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6472Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6471Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61...CVE-2020-6470Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6469Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...CVE-2020-6468Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...CVE-2020-6467Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had...CVE-2020-6466Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote...CVE-2020-6465Fix available9.6 Critical
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...CVE-2020-6463Fix available8.8 High
- fedoraproject fedora, mariadb connector\/c, opensuse leap +2 morelibmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the...CVE-2020-13249Fix available8.8 High
- httplib2, debian linux, fedoraproject fedora +2 moreCRLF injection in httplib2CVE-2020-11078Fix available6.8 Medium
- cacti, fedoraproject fedora +1 moreIn Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.CVE-2020-13231Fix available6.5 Medium
- cacti, debian linux, fedoraproject fedora +2 moreIn Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions...CVE-2020-13230Fix available4.3 Medium
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash....CVE-2020-13164Fix available7.5 High
- red hat resteasy, fedoraproject fedora +1 moreImproper Input Validation in RESTEasyCVE-2020-1695Fix available7.5 High
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 moreAn issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer...CVE-2020-12244Fix available7.5 High
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 morePowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against...CVE-2020-10995Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct...CVE-2020-10726Fix available6.0 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a...CVE-2020-10725Fix available7.7 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is...CVE-2020-10724Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an...CVE-2020-10723Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...CVE-2020-10722Fix available5.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- transmissionbt transmission, debian linux, fedoraproject fedora +2 moreUse-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers...CVE-2018-10756Fix available7.8 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV PDF Parsing Denial of Service VulnerabilityCVE-2020-3341Fix available7.5 High
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV ARJ Archive Parsing Denial of Service VulnerabilityCVE-2020-3327Fix available7.5 High
- debian apt, canonical ubuntu linux, debian linux +1 more +3 moreMissing input validation in the ar/tar implementations of APT before version 2.1.2 could result...CVE-2020-3810Fix available5.5 Medium
- infradead openconnect, debian linux, fedoraproject fedora +1 more +3 moreOpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or...CVE-2020-12823Fix available9.8 Critical
- rubyonrails active resource, fedoraproject fedora +1 moreInformation disclosure issue in Active ResourceCVE-2020-8151Fix available7.5 High
- fedoraproject fedora, nextcloud group folders +1 moreImproper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when...CVE-2020-81538.1 High
- nextcloud mail, fedoraproject fedora +1 moreA missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.CVE-2020-81567.0 High
- apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 moreXML External Entity attack in log4netCVE-2018-1285Public exploitFix availableEPSS 17.8%9.8 Critical
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.CVE-2020-11866Fix available7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.CVE-2020-11865Fix available7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).CVE-2020-11864Fix available5.5 Medium
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).CVE-2020-11863Fix available5.5 Medium
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA...CVE-2020-12783Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...CVE-2020-12762Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation....CVE-2020-12740Fix available9.1 Critical
- qutebrowser, fedoraproject fedora +1 moreIncorrect Provision of Specified Functionality in qutebrowserCVE-2020-11054Fix available3.5 Low
- Show moreLoading…