Skip to contentFedoraproject vulnerabilities
Newest
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. During USB device initialization,...CVE-2020-25647Fix available7.6 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the...CVE-2020-25632Public exploitFix available8.2 High
- gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 moreA flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of...CVE-2020-14372Public exploitFix available7.5 High
- debian linux, fedoraproject fedora, w1.fi wpa supplicant +2 moreA vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ...CVE-2021-27803Fix available7.5 High
- element-hq synapse, fedoraproject fedora +1 moreOpen redirects on some federation and push requestsCVE-2021-21273Fix available3.1 Low
- element-hq synapse, fedoraproject fedora +1 moreDenial of service attack via .well-known lookupsCVE-2021-21274Fix available4.3 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt is vulnerable to shell injection via ProxyCommand argumentCVE-2021-3197Fix availableEPSS 71.7%9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt command injection in the Salt-API when using the Salt-SSH clientCVE-2021-3148Fix available9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt eauth tokens can be used once after expirationCVE-2021-3144Fix available9.1 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Cleartext Storage of Sensitive Information via cmdmodCVE-2021-25284Fix available4.4 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Server Side Template InjectionCVE-2021-25283Fix availableEPSS 10.4%9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Directory Traversal vulnerabilityCVE-2021-25282Public exploitFix availableEPSS 92.6%9.1 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Authentication vulnerabilityCVE-2021-25281Public exploitFix availableEPSS 72.9%9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper SSL Certificate ValidationCVE-2020-35662Fix available7.4 High
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Certificate ValidationCVE-2020-28972Fix available5.9 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt command injection via a crafted process nameCVE-2020-28243Public exploitFix available7.8 High
- aio-libs aiohttp, debian linux, fedoraproject fedora +2 moreOpen redirect vulnerability in aiohttpCVE-2021-21330Fix available3.1 Low
- microsoft .net, .net core, fedoraproject fedora +13 more +15 more.NET Core Remote Code Execution VulnerabilityCVE-2021-26701Fix availableEPSS 30.1%8.1 High
- keylime, fedoraproject fedora +1 moreA flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.CVE-2021-34069.8 Critical
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file...CVE-2021-20246Fix available5.5 Medium
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted...CVE-2021-20244Fix available5.5 Medium
- apache xmlgraphics commons, fedoraproject fedora +1 moreServer-side request forgery (SSRF) in Apache XmlGraphics CommonsCVE-2020-11988Fix available8.2 High
- openscad, fedoraproject fedora +1 moreA stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl()...CVE-2020-28599Fix available8.8 High
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,...CVE-2021-27645Fix available2.5 Low
- nodejs node, node.js, fedoraproject fedora +11 more +13 moreNode.js badCVE-2021-22884Fix availableEPSS 36.8%7.5 High
- nodejs node, node.js, fedoraproject fedora +7 more +9 moreNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...CVE-2021-22883Fix availableEPSS 77.4%7.5 High
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache BatikCVE-2020-11987Fix availableEPSS 13.6%8.2 High
- cacalabs libcaca, debian linux, fedoraproject fedora +2 moreA flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in...CVE-2021-3410Fix available7.8 High
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...CVE-2021-3407Fix availableEPSS 50.2%5.5 Medium
- matroska libebml, debian linux, fedoraproject fedora +2 moreA flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of...CVE-2021-3405Fix available6.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreA flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c...CVE-2021-26927Fix available5.5 Medium
- mbsync project mbsync, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by...CVE-2021-20247Fix available7.4 High
- jasper project jasper, fedoraproject fedora +1 moreA flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode...CVE-2021-26926Fix available7.1 High
- qemu, debian linux, fedoraproject fedora +5 more +7 moreAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...CVE-2021-20257Fix available6.5 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIncorrect Authorization in PostgreSQLCVE-2021-20229Fix available4.3 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...CVE-2021-20203Fix available3.2 Low
- google chrome, fedoraproject fedora, microsoft edge +1 more +3 moreUse after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote...CVE-2021-21157Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to...CVE-2021-21156Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a...CVE-2021-21155Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote...CVE-2021-21154Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a...CVE-2021-21153Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote...CVE-2021-21152Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to...CVE-2021-21151Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote...CVE-2021-21150Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a...CVE-2021-21149Fix available8.8 High
- reportlab, fedoraproject fedora +1 moreServer-side Request Forgery (SSRF)CVE-2020-28463Fix available6.5 Medium
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreMemory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...CVE-2021-22173Fix available3.7 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreCrash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...CVE-2021-22174Fix available3.7 Low
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend...CVE-2021-26934Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether...CVE-2021-26933Fix available5.5 Medium
- Show moreLoading…