Skip to contentFedoraproject vulnerabilities
Newest
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileCVE-2021-27906Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-27807Fix available5.5 Medium
- kramdown project kramdown, debian linux, fedoraproject fedora +2 moreRemote code execution in KramdownCVE-2021-28834Fix available9.8 Critical
- busybox, debian linux, fedoraproject fedora +2 moredecompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result...CVE-2021-28831Fix available7.5 High
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreImportant: squid:4 security updateCVE-2020-25097Fix available8.6 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...CVE-2020-27171Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs...CVE-2020-27170Fix available4.7 Medium
- qemu, debian linux, fedoraproject fedora +1 more +3 moreA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...CVE-2021-3416Fix available6.0 Medium
- mediaarea mediainfo, fedoraproject fedora +1 moreMediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib:...CVE-2020-26797Fix available7.5 High
- pygments, debian linux, fedoraproject fedora +2 morePygments vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2021-27291Fix available7.5 High
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and...CVE-2021-28650Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 morertw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5...CVE-2021-28660Fix available8.8 High
- varnish-cache varnish-modules, fedoraproject fedora, varnish-cache varnish-modules klarlack +2 moreVarnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service ...CVE-2021-285434.0 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...CVE-2021-21193In KEVPublic exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote...CVE-2021-21192Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...CVE-2021-21191Fix available8.8 High
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an...CVE-2021-28090Fix available5.3 Medium
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU...CVE-2021-28089Fix available7.5 High
- moodle, fedoraproject fedora +1 moreMissing permission check in MoodleCVE-2021-20283Fix available4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle Bypass email verification secret when confirming account registrationCVE-2021-20282Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle allowed some users without permission to view other users' full namesCVE-2021-20281Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreCross-site scripting (XSS) and Server side request forgery (SSRF) in moodleCVE-2021-20280Fix available5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle contains Stored XSS via ID number user profile fieldCVE-2021-20279Fix available5.4 Medium
- lynx project lynx, debian linux, fedoraproject fedora +2 moreLynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers...CVE-2021-38165Fix available5.3 Medium
- [unknown] pki-core, dogtagpki, fedoraproject fedora +2 more +4 moreA flaw was found in pki-core. An attacker who has successfully compromised a key could use this...CVE-2021-20179Fix available8.1 High
- linux kernel, fedoraproject fedora, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers...CVE-2021-28375Fix available7.8 High
- python urllib3, fedoraproject fedora, oracle peoplesoft enterprise peopletools +3 more +5 moreUsing default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connectionCVE-2021-28363Fix available6.5 Medium
- gnu gnutls, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in gnutls. A use after free issue in client_send_params in lib/ext...CVE-2021-20232Fix available9.8 Critical
- gnu gnutls, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreA flaw was found in gnutls. A use after free issue in client sending key_share extension may lead...CVE-2021-20231Fix available9.8 Critical
- elementary switchboard-plug-bluetooth, switchboard bluetooth plug, fedoraproject fedora +2 moreIncorrect Authorization in switchboard-plug-bluetoothCVE-2021-21367Fix available6.1 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 moreInsertion of Sensitive Information into Log File in ansibleCVE-2021-20178Fix available5.5 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in...CVE-2020-36281Fix available7.5 High
- leptonica, fedoraproject fedora +1 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to...CVE-2020-36280Fix available7.5 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to...CVE-2020-36279Fix available7.5 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.CVE-2020-36278Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +4 more +6 moreAn issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with...CVE-2021-28153Fix available5.3 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left...CVE-2020-36277Fix available7.5 High
- golang go, fedoraproject fedora +1 morearchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...CVE-2021-27919Fix available5.5 Medium
- debian linux, flatpak, fedoraproject fedora +2 moreSandbox escape via special tokens in .desktop fileCVE-2021-21381Fix available7.1 High
- libjpeg-turbo, fedoraproject fedora +1 moreLibjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability...CVE-2021-20205Fix available6.5 Medium
- 3mf lib3mf, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality...CVE-2021-21772Public exploitFix available8.1 High
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure...CVE-2021-28116Fix availableEPSS 12.9%3.7 Low
- git, apple xcode, debian linux +1 more +3 moremalicious repositories can execute remote code while cloningCVE-2021-21300Public exploitFix availableEPSS 88.5%8.0 High
- pygments, debian linux, fedoraproject fedora +5 more +7 moreInfinite Loop in PygmentsCVE-2021-20270Fix available7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is...CVE-2021-20245Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21190Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21189Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21188Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a...CVE-2021-21187Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72...CVE-2021-21186Fix available4.3 Medium
- Show moreLoading…