Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, apple ipados, iphone os +7 more +9 moreUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15969Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...CVE-2020-26575Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector...CVE-2020-25863Fix available7.5 High
- wireshark, fedoraproject fedora, opensuse leap +1 more +3 moreIn Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer...CVE-2020-25866Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash....CVE-2020-25862Fix available7.5 High
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer...CVE-2020-26570Fix available5.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer...CVE-2020-26571Fix available5.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow...CVE-2020-26572Fix available5.5 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreA logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users...CVE-2020-82236.5 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- artifex mupdf, debian linux, fedoraproject fedora +2 morefitz/pixmap.c in Artifex MuPDF 1.17.0 has an overflow during pixmap size calculation.CVE-2020-26519Fix available5.5 Medium
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- ruby-lang ruby, webrick, fedoraproject fedora +2 moreWEBRick vulnerable to HTTP Request/Response SmugglingCVE-2020-25613Public exploitFix available7.5 High
- libproxy project libproxy, debian linux, fedoraproject fedora +1 more +3 moreurl.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as...CVE-2020-26154Fix available9.8 Critical
- goxmldsig project goxmldsig, fedoraproject fedora +1 moreSignature Validation Bypass in goxmldsigCVE-2020-15216Fix available5.3 Medium
- carltongibson django-filter, fedoraproject fedora +1 moreDenial of Service vulnerability in django-filterCVE-2020-15225Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreAn information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1...CVE-2020-25869Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25815Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker...CVE-2020-26121Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreXSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is...CVE-2020-26120Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +8 more +10 morehttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...CVE-2020-26116Fix available7.2 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25828Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreOATHAuth extension in MediaWiki is not implementing rate limitCVE-2020-25827Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25814Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Special:UserRights exposes the existence of hidden usersCVE-2020-25813Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25812Fix available6.1 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...CVE-2020-25603Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of...CVE-2020-25596Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers...CVE-2020-25604Fix available4.7 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when...CVE-2020-25602Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() /...CVE-2020-25601Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32...CVE-2020-25600Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of...CVE-2020-25599Fix available7.0 High
- xen, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource...CVE-2020-25598Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once...CVE-2020-25597Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register...CVE-2020-25595Fix available7.8 High
- containers podman, fedoraproject fedora, redhat enterprise linux +1 more +3 moreInformation disclosure in podmanCVE-2020-14370Fix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote...CVE-2020-6576Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreRace in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had...CVE-2020-6575Fix available8.3 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102...CVE-2020-6574Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote...CVE-2020-6573Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15966Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to...CVE-2020-15965Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15964Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15963Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote...CVE-2020-15962Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an...CVE-2020-15961Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker...CVE-2020-15960Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an...CVE-2020-15959Fix available4.3 Medium
- Show moreLoading…