Skip to contentFedoraproject vulnerabilities
Newest
- debian linux, fedoraproject fedora, intel microcode +4 more +6 moreImproper removal of sensitive information before storage or transfer in some Intel(R) Processors...CVE-2020-8696Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel celeron 3855u firmware +298 more +300 moreObservable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged...CVE-2020-8695Fix available5.5 Medium
- librdf raptor rdf syntax library, debian linux, fedoraproject fedora +2 moreraptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15...CVE-2017-18926Fix available7.1 High
- linuxfoundation nats-server, fedoraproject fedora +1 moreIncorrect handling of credential expiry by /nats-io/nats-serverCVE-2020-26892Fix available9.8 Critical
- linuxfoundation nats-server, fedoraproject fedora +1 moreNil dereference in NATS JWT, DoS of nats-serverCVE-2020-26521Fix available7.5 High
- mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 moreMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...CVE-2020-28196Fix available7.5 High
- asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 moreAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...CVE-2020-28242Fix available6.5 Medium
- maxmind libmaxminddb, debian linux, fedoraproject fedora +2 morelibmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.CVE-2020-28241Fix available6.5 Medium
- tcpdump, apple mac os x, macos +2 more +4 moreppp decapsulator can be convinced to allocate a large amount of memoryCVE-2020-8037Fix available7.5 High
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 moreSaltStack Salt Command Injection in netapi ssh clientCVE-2020-16846In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- sddm project sddm, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that -...CVE-2020-28049Fix available6.3 Medium
- google chrome, cefsharp, debian linux +6 more +8 moreInappropriate implementation in V8CVE-2020-16009In KEVFix availableEPSS 48.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreStack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker...CVE-2020-16008Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16006Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16005Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16004Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to...CVE-2020-15995Fix available8.8 High
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA race condition vulnerability was found in the way the spice-vdagentd daemon handled new client...CVE-2020-25653Fix available6.3 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the spice-vdagentd daemon, where it did not properly handle client...CVE-2020-25652Fix available5.5 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the SPICE file transfer protocol. File data from the host system can end up...CVE-2020-25651Fix available6.4 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system...CVE-2020-25650Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads...CVE-2020-25673Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA memory leak vulnerability was found in Linux kernel in llcp_sock_connectCVE-2020-25672Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing...CVE-2020-25671Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use...CVE-2020-25670Fix available7.8 High
- google android, fedoraproject fedora +1 moreIn exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an...CVE-2020-0452Public exploitFix available9.8 Critical
- wordpress, debian linux, fedoraproject fedora +2 moreWordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility...CVE-2020-28032Public exploitFix availableEPSS 15.7%9.8 Critical
- wordpress, debian linux, fedoraproject fedora +2 moreWordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as...CVE-2020-28033Fix available7.5 High
- wordpress, debian linux, fedoraproject fedora +2 moreWordPress before 5.5.2 allows XSS associated with global variables.CVE-2020-28034Fix available6.1 Medium
- wordpress, debian linux, fedoraproject fedora +2 morewp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain...CVE-2020-28036Fix available9.8 Critical
- wordpress, debian linux, fedoraproject fedora +2 moreis_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines...CVE-2020-28037Fix available9.8 Critical
- wordpress, debian linux, fedoraproject fedora +2 moreWordPress before 5.5.2 allows stored XSS via post slugs.CVE-2020-28038Fix available6.1 Medium
- wordpress, debian linux, fedoraproject fedora +2 moreWordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.CVE-2020-28035Fix available9.8 Critical
- wireshark, debian linux, fedoraproject fedora +2 moreIn Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan...CVE-2020-28030Fix available7.5 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15,...CVE-2020-14323Fix available5.5 Medium
- blueman-project blueman, debian linux, fedoraproject fedora +2 moreLocal privilege escalation BluemanCVE-2020-15238Public exploitFix available7.1 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...CVE-2020-16003Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...CVE-2020-16002Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to...CVE-2020-16001Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote...CVE-2020-16000Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of...CVE-2020-27670Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a...CVE-2020-27671Fix available7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS...CVE-2020-27672Fix available7.0 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS...CVE-2020-27674Fix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x....CVE-2020-27675Fix available4.7 Medium
- fastd project fastd, debian linux, fedoraproject fedora +2 morereceive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets...CVE-2020-27638Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a...CVE-2020-6557Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a...CVE-2020-15992Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote...CVE-2020-15991Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who...CVE-2020-15990Fix available8.8 High
- Show moreLoading…