Skip to contentFedoraproject vulnerabilities
Newest
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...CVE-2020-8201Fix available7.4 High
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...CVE-2020-8252Fix available7.8 High
- nodejs node, node.js, fedoraproject fedora +2 moreNode.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests...CVE-2020-8251Fix available7.5 High
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...CVE-2019-20919Fix available4.7 Medium
- microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 moreA buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply...CVE-2020-14393Fix available7.1 High
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2020Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2021-2019Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2016Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2021-2012Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles)....CVE-2021-2009Fix available4.9 Medium
- oracle mysql, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2006Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-1998Fix available3.8 Low
- action view project view, debian linux, fedoraproject fedora +1 more +3 moreXSS in Action ViewCVE-2020-15169Public exploitFix available5.4 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 moreMicrosoft ASP.NET Core Security Feature Bypass VulnerabilityCVE-2020-1045Fix available7.5 High
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration...CVE-2020-25211Fix available6.0 Medium
- cifs-utils, fedoraproject fedora, opensuse leap +2 moreIt was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password,...CVE-2020-14342Fix available4.4 Medium
- debian linux, fedoraproject fedora, zeromq libzmq +2 moreDenial of Service in ZeroMQCVE-2020-15166Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...CVE-2020-24659Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft softwareCVE-2020-14386Public exploitFix available6.7 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- cryptsetup project cryptsetup, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2...CVE-2020-14382Fix available7.8 High
- sensiolabs httpclient, symfony, fedoraproject fedora +2 moreRCE in SymfonyCVE-2020-15094Fix available8.0 High
- golang go, fedoraproject fedora, opensuse leap +1 more +3 moreGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...CVE-2020-24553Fix available6.1 Medium
- arm mbed tls, debian linux, fedoraproject fedora +2 moreA Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...CVE-2020-16150Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24584Fix available7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24583Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6571Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to...CVE-2020-6570Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who...CVE-2020-6569Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6568Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in command line handling in Google Chrome on Windows...CVE-2020-6567Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6566Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6565Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6564Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6563Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6562Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83...CVE-2020-6561Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6560Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6559Fix available8.8 High
- microsoft librepo, fedoraproject fedora, opensuse backports sle +1 more +3 moreA flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was...CVE-2020-14352Fix available8.0 High
- kleopatra project kleopatra, fedoraproject fedora, opensuse backports sle +1 more +3 moreThe Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to...CVE-2020-24972Public exploitFix available8.8 High
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the...CVE-2020-24654Fix available3.3 Low
- gnome geary, fedoraproject fedora +1 moreGNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP...CVE-2020-24661Fix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote...CVE-2020-6556Fix available8.8 High
- fossil-scm fossil, fedoraproject fedora, opensuse backports sle +1 more +3 moreFossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated...CVE-2020-24614Fix available8.8 High
- the x11 project libx11, fedoraproject fedora +1 moreAn integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows...CVE-2020-14363Fix available7.8 High
- fedoraproject selinux-policyAn issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08...CVE-2020-24612Fix available6.7 Medium
- Show moreLoading…