Skip to contentFedoraproject vulnerabilities
Newest
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping...CVE-2021-26932Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net,...CVE-2021-26931Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service...CVE-2021-26930Fix available7.8 High
- gnome gdk-pixbuf, fedoraproject fedora +1 moreA flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out...CVE-2021-20240Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw...CVE-2021-20239Fix available3.3 Low
- isc bind, debian linux, fedoraproject fedora +5 more +7 moreA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2020-8625Fix availableEPSS 65.4%8.1 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...CVE-2021-27219Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...CVE-2021-27218Fix available7.5 High
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- autotrace project autotrace, fedoraproject fedora +1 moreA bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified...CVE-2019-190057.8 High
- autotrace project autotrace, fedoraproject fedora +1 moreA biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to...CVE-2019-190043.3 Low
- fedoraproject fedora, rails https://github.com/rails/rails, rubyonrails rails +2 moreActionpack Open Redirect VulnerabilityCVE-2021-22881Fix availableEPSS 87.3%6.1 Medium
- rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 moreActive Record subject to Regular Expression Denial-of-Service (ReDoS)CVE-2021-22880Public exploitFix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia...CVE-2020-13575Fix available7.5 High
- invisible-island xterm, debian linux, fedoraproject fedora +2 morexterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault...CVE-2021-27135Fix available9.8 Critical
- openvswitch, debian linux, fedoraproject fedora +2 moreA vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...CVE-2020-35498Public exploitFix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...CVE-2020-13578Fix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...CVE-2020-13577Fix available7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...CVE-2020-13576Fix available9.8 Critical
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...CVE-2020-13574Fix available7.5 High
- gnu screen, debian linux, fedoraproject fedora +2 moreencoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service ...CVE-2021-26937Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...CVE-2021-21148In KEVPublic exploitFix availableEPSS 20.0%8.8 High
- fedoraproject fedora, roundcube webmail +1 moreRoundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences...CVE-2021-26925Fix available5.4 Medium
- symonics libmysofa, fedoraproject fedora +1 moreBuffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows...CVE-2020-36152Fix available8.8 High
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library...CVE-2020-36151Fix available6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will...CVE-2020-36150Fix available6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1...CVE-2020-36149Fix available6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1...CVE-2020-36148Fix available6.5 Medium
- cryptography.io cryptography, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 morePyCA Cryptography symmetrically encrypting large values can lead to integer overflowCVE-2020-36242Fix available9.1 Critical
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local...CVE-2021-21147Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker...CVE-2021-21146Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to...CVE-2021-21145Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker...CVE-2021-21144Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker...CVE-2021-21143Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote...CVE-2021-21142Fix available9.6 Critical
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and...CVE-2020-36241Fix available5.5 Medium
- mechanize project mechanize, debian linux, fedoraproject fedora +2 moreCommand Injection Vulnerability in MechanizeCVE-2021-21289Fix available7.4 High
- palletsprojects jinja, fedoraproject fedora +1 moreRegular Expression Denial of Service (ReDoS)CVE-2020-28493Fix available5.3 Medium
- djangoproject django, fedoraproject fedora, netapp snapcenter +2 moreDjango Directory Traversal via archive.extractCVE-2021-3281Public exploitFix available5.3 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds...CVE-2021-0326Public exploitFix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use...CVE-2021-3347Public exploitFix available7.8 High
- fibranet monitorix, fedoraproject fedora +1 moreMonitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation...CVE-2021-33259.8 Critical
- jasper project jasper, fedoraproject fedora +1 morejp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when...CVE-2021-3272Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest...CVE-2021-3308Fix available5.5 Medium
- golang go, debian linux, fedoraproject fedora +2 more +4 moreIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...CVE-2021-3114Fix available6.5 Medium
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...CVE-2021-3115Fix available7.5 High
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...CVE-2021-3156In KEVPublic exploitFix availableEPSS 100.0%7.8 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2021Public exploitFix availableEPSS 10.0%4.9 Medium
- oracle mysql, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2011Fix available5.9 Medium
- oracle mysql, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2010Fix available4.2 Medium
- Show moreLoading…