Skip to contentFedoraproject vulnerabilities
Newest
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-11538Fix available8.1 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds reads in PillowCVE-2020-10994Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in PillowCVE-2020-10379Fix available7.8 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-10378Fix available5.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreimg_auth.php may leak private extension images into the public cacheCVE-2020-15005Fix available3.1 Low
- rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 moreUntrusted users can run pending migrations in production in RailsCVE-2020-8185Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDPCVE-2020-11098Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDPCVE-2020-11097Public exploitFix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPCVE-2020-11096Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDPCVE-2020-11095Fix available3.5 Low
- alpine project alpine, debian linux, fedoraproject fedora +2 moreAlpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in...CVE-2020-14929Fix available7.5 High
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...CVE-2020-14954Fix available5.9 Medium
- mozilla firefox, debian linux, fedoraproject fedora +1 more +3 moreDuring RSA key generation, bignum implementations used a variation of the Binary Extended...CVE-2020-12402Fix available4.4 Medium
- cisofy lynis, fedoraproject fedora +1 moreCISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The...CVE-2020-13882Fix available4.2 Medium
- cisofy lynis, debian linux, fedoraproject fedora +2 moreIn CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list...CVE-2019-13033Fix available3.3 Low
- cisco amp for endpoints, clam antivirus, canonical ubuntu linux +3 more +5 moreCisco AMP for Endpoints and ClamAV Privilege Escalation VulnerabilityCVE-2020-3350Fix available5.5 Medium
- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in PythonCVE-2020-14422Fix availableEPSS 12.7%5.9 Medium
- golang text, fedoraproject fedora +1 moregolang.org/x/text Infinite loopCVE-2020-14040Fix available7.5 High
- cacti, fedoraproject fedora +1 moreA SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter...CVE-2020-14295Public exploitFix availableEPSS 86.1%7.2 High
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- fedoraproject fedora, tiny-http project tiny-http +1 moreHTTP Request smuggling in tiny_httpCVE-2020-35884Fix available6.5 Medium
- barton ngircd, debian linux, fedoraproject fedora +2 moreThe Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access,...CVE-2020-14148Fix available7.5 High
- libemf project libemf, fedoraproject fedora +1 moreScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an...CVE-2020-13999Fix available5.5 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS via media attachment page in WordPressCVE-2020-4047Fix available6.8 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreOpen redirect in wp_validate_redirect() in WordPressCVE-2020-4048Fix available5.7 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated self-XSS via theme uploads in WordPressCVE-2020-4049Fix available2.4 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreset-screen-option filter misuse by plugins leading to privilege escalation in WordPressCVE-2020-4050Fix available3.5 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS through embed block in WordPressCVE-2020-4046Fix available5.4 Medium
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the...CVE-2017-9109Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a...CVE-2017-9108Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with...CVE-2017-9107Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general...CVE-2017-9106Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks...CVE-2017-9105Fix available8.8 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop...CVE-2017-9104Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from...CVE-2017-9103Fix available9.8 Critical
- kata containers containers, katacontainers runtime, fedoraproject fedora +2 moreKata Containers - Guests can trick the kata-runtime into mounting the container image on any host pathCVE-2020-2026Fix available7.8 High
- nagios, fedoraproject fedora +1 moreNagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for...CVE-2020-13977Fix available4.9 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include...CVE-2020-13964Fix available6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS...CVE-2020-13965In KEVPublic exploitFix availableEPSS 76.6%6.1 Medium
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...CVE-2020-0543Fix available5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...CVE-2020-0198Public exploitFix available7.5 High
- mumble, qt, fedoraproject fedora +1 more +3 moreQt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products,...CVE-2020-13962Fix available7.5 High
- [red hat] networkmanager, fedoraproject fedora +1 moreIt was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...CVE-2020-10754Fix available4.3 Medium
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...CVE-2020-12695Public exploitFix availableEPSS 15.2%7.5 High
- Show moreLoading…