Skip to contentFedoraproject vulnerabilities
Newest
- libreoffice, fedoraproject fedora, opensuse leap +2 moreXForms submissions could overwrite local filesCVE-2020-12803Fix available6.5 Medium
- libreoffice, fedoraproject fedora, opensuse leap +2 moreremote graphics contained in docx format retrieved in 'stealth mode'CVE-2020-12802Fix available5.3 Medium
- debian linux, linuxtv xawtv, canonical ubuntu linux +3 more +5 moreAn issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does...CVE-2020-13696Fix available4.4 Medium
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- targetcli-fb project targetcli-fb, fedoraproject fedora +1 moreOpen-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup...CVE-2020-13867Fix available5.5 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kube-controller-manager SSRFCVE-2020-8555Fix available6.3 Medium
- postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 moreImproper Restriction of XML External Entity ReferenceCVE-2020-13692Fix available7.7 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...CVE-2020-10757Public exploitFix available7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 more +4 moreServer Side Request Forgery in GrafanaCVE-2020-13379Public exploitFix availableEPSS 99.9%8.2 High
- red hat containernetworking/plugins, fedoraproject fedora, linuxfoundation cni network plugins +2 more +4 morecontainernetworking/plugins vulnerable to MitM attacksCVE-2020-10749Public exploitFix available6.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- systemd project systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moresystemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x...CVE-2020-13776Fix available6.7 Medium
- nghttp2, debian linux, fedoraproject fedora +7 more +9 moreDenial of service in nghttp2CVE-2020-11080Fix available3.7 Low
- znc, fedoraproject fedora +1 moreZNC 1.8.0 up to 1.8.1-rc1 allows attackers to trigger an application crash (with a NULL pointer...CVE-2020-13775Fix available6.5 Medium
- docker engine, broadcom sannav, debian linux +1 more +3 moreImproper Input Validation in Docker EngineCVE-2020-13401Public exploitFix available6.0 Medium
- python-rsa project python-rsa, canonical ubuntu linux, fedoraproject fedora +2 morePython-RSA decryption of ciphertext leads to DoSCVE-2020-13757Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft softwareCVE-2020-12723Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft softwareCVE-2020-10878Fix available8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft softwareCVE-2020-10543Fix availableEPSS 11.3%8.2 High
- sane-project sane backends, canonical ubuntu linux, debian linux +2 more +4 moreA NULL pointer dereference in sanei_epson_net_read in SANE Backends through 1.0.29 allows a...CVE-2020-12867Fix available5.5 Medium
- gnome balsa, glib-networking, broadcom fabric operating system +3 more +5 moreIn GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...CVE-2020-13645Fix available6.5 Medium
- sympa, canonical ubuntu linux, debian linux +1 more +3 moreSympa before 6.2.56 allows privilege escalation.CVE-2020-10936Fix available7.8 High
- phpmailer project phpmailer, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient output escaping of attachment names in PHPMailerCVE-2020-13625Fix available7.5 High
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 High
- sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...CVE-2020-13631Fix available5.5 Medium
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 Medium
- axel project axel, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname...CVE-2020-13614Fix available5.9 Medium
- em-http-request project em-http-request, fedoraproject fedora +1 moreImproper Certificate Validation in EM-HTTP-RequestCVE-2020-13482Fix available7.4 High
- sqlite, apple icloud, ipados +15 more +17 moreSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.CVE-2020-13434Fix available5.5 Medium
- sqlite, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreSQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.CVE-2020-13435Fix available5.5 Medium
- puma, debian linux, fedoraproject fedora +1 more +3 moreHTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11077Fix available6.8 Medium
- puma, debian linux, fedoraproject fedora +2 moreHTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11076Public exploitFix available7.5 High
- schedmd slurm, debian linux, fedoraproject fedora +1 more +3 moreSlurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message...CVE-2020-12693Fix available8.1 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6491Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6490Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6489Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6488Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6487Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6486Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6485Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6484Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6483Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6482Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6481Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6480Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6479Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6478Fix available6.5 Medium
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreInappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed...CVE-2020-6477Fix available7.8 High
- Show moreLoading…