Skip to contentFedoraproject vulnerabilities
Newest
- dovecot, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker...CVE-2020-24386Fix available6.8 Medium
- gnu glibc, broadcom fabric operating system, debian linux +8 more +10 moreThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...CVE-2019-25013Fix available5.9 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff...CVE-2020-35524Fix available7.8 High
- apple ipados, macos, tvos +5 more +7 more"Clear History and Website Data" did not clear the history. The issue was addressed with improved...CVE-2020-29623Fix available3.3 Low
- apache spamassassin, debian linux, fedoraproject fedora +2 moreApache SpamAssassin has an OS Command Injection vulnerabilityCVE-2020-1946Fix available9.8 Critical
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreThere's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is...CVE-2020-27845Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide...CVE-2020-27843Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject extra packages for enterprise linux +8 more +10 moreThere's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to...CVE-2020-27842Fix available5.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreThere's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker...CVE-2020-27841Fix available5.5 Medium
- wavpack, debian linux, fedoraproject fedora +2 moreWavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an...CVE-2020-35738Fix available6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 morelinkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a...CVE-2020-35730In KEVPublic exploitFix availableEPSS 30.9%6.1 Medium
- xpdfreader xpdf, fedoraproject fedora +1 moreXpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font...CVE-2020-35376Fix available7.5 High
- opensmtpd, fedoraproject fedora +1 moresmtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to...CVE-2020-35679Fix available7.5 High
- opensmtpd, fedoraproject fedora +1 moresmtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote...CVE-2020-35680Fix available7.5 High
- saml project saml, fedoraproject fedora, grafana +3 more +5 moreXML Processing error in github.com/crewjam/samlCVE-2020-27846Fix available9.8 Critical
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace...CVE-2020-35478Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS...CVE-2020-35474Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...CVE-2020-35480Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...CVE-2020-35479Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...CVE-2020-35477Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...CVE-2020-35475Fix available7.5 High
- ceph, fedoraproject fedora, redhat ceph storage +2 more +4 moreUser credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,...CVE-2020-27781Fix available7.1 High
- x-stream xstream, apache struts, debian linux +1 more +3 moreServer-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258Public exploitFix availableEPSS 81.8%6.3 Medium
- x-stream xstream, apache struts, debian linux +1 more +3 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259Public exploitFix availableEPSS 82.4%6.8 Medium
- jsonparser project jsonparser, fedoraproject fedora +1 moreDenial of Service in jsonparserCVE-2020-35381Fix available7.5 High
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of...CVE-2020-29567Fix available6.2 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2194Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2022Fix available4.4 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read...CVE-2020-0499Fix available4.3 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A bounds check common to most operation time...CVE-2020-29571Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping...CVE-2020-29570Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When they require assistance from the device model...CVE-2020-29566Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored...CVE-2020-29486Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES...CVE-2020-29485Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client...CVE-2020-29484Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared...CVE-2020-29483Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute...CVE-2020-29482Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid....CVE-2020-29481Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any...CVE-2020-29480Fix available2.3 Low
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the...CVE-2020-29479Fix available8.8 High
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting...CVE-2020-35176Fix available5.3 Medium
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreMemory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...CVE-2020-26418Fix available3.1 Low
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreCrash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to...CVE-2020-26421Fix available4.2 Medium
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...CVE-2020-26420Fix available3.1 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet...CVE-2020-26419Fix available3.1 Low
- phpldapadmin project phpldapadmin, fedoraproject fedora +1 moreAn XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store...CVE-2020-35132Fix available5.4 Medium
- jasper project jasper, fedoraproject fedora +1 moreThere's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to...CVE-2020-27828Fix available7.8 High
- sympa, debian linux, fedoraproject fedora +2 moreSympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any...CVE-2020-29668Fix available3.7 Low
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This...CVE-2020-27824Public exploitFix available5.5 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU...CVE-2020-16592Fix available5.5 Medium
- Show moreLoading…