Skip to contentFedoraproject vulnerabilities
Newest
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- red hat ansible, redhat ansible tower, fedoraproject fedora +2 moreA flaw was found in several ansible modules, where parameters containing credentials, such as...CVE-2021-3447Fix available5.5 Medium
- pikepdf project pikepdf, fedoraproject fedora +1 moreImproper Restriction of XML External Entity Reference in pikepdfCVE-2021-29421Fix available7.5 High
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node...CVE-2021-29646Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c...CVE-2021-29647Fix available5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly...CVE-2021-29648Fix available5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a...CVE-2021-29649Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows...CVE-2021-29650Fix available5.5 Medium
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 morecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...CVE-2021-22890Fix available3.7 Low
- haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 morecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...CVE-2021-22876Fix available5.3 Medium
- fedoraproject fedora, net\ \ +1 moreThe Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero...CVE-2021-29424Fix available7.5 High
- jashkenas underscore, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code InjectionCVE-2021-23358Public exploitFix available3.3 Low
- element-hq synapse, fedoraproject fedora +1 moreHTML injection in email and account expiry notificationsCVE-2021-21333Fix available6.1 Medium
- element-hq synapse, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in the password reset endpointCVE-2021-21332Fix available6.9 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in RPM's signature check functionality when reading a package file. This flaw...CVE-2021-20271Fix available7.0 High
- jasper project jasper, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled...CVE-2021-3467Fix available5.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms...CVE-2021-3446Fix available5.5 Medium
- jasper project jasper, fedoraproject fedora, redhat enterprise linux +2 moreA NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled...CVE-2021-3443Fix available5.5 Medium
- gnu libmicrohttpd, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libmicrohttpd in versions before 0.9.71. A missing bounds check in the...CVE-2021-3466Fix available9.8 Critical
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreThere is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau...CVE-2021-20292Fix available6.7 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can...CVE-2021-20277Fix available7.5 High
- apple ipados, macos, ios and ipados +5 more +7 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2...CVE-2021-1870In KEVFix available9.8 Critical
- apple macos, tvos, watchos +5 more +7 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS...CVE-2021-1801Fix available6.5 Medium
- apple macos, safari, tvos +6 more +8 moreA port redirection issue was addressed with additional port validation. This issue is fixed in...CVE-2021-1799Fix available6.5 Medium
- apple ipados, macos, tvos +7 more +9 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...CVE-2021-1789In KEVFix availableEPSS 14.0%8.8 High
- apple macos, mac os x, fedoraproject fedora +1 more +3 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS...CVE-2021-1765Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to...CVE-2020-27840Fix available7.5 High
- qemu, debian linux, fedoraproject fedora +1 more +3 moreThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...CVE-2021-3409Fix available5.7 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while...CVE-2021-3392Fix available3.2 Low
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351Fix availableEPSS 82.1%5.4 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21350Fix availableEPSS 15.2%5.3 Medium
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349Public exploitFix availableEPSS 46.8%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348Fix availableEPSS 13.8%5.3 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21347Fix availableEPSS 14.3%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21346Fix availableEPSS 76.4%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-21345Public exploitFix availableEPSS 72.3%5.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21344Fix availableEPSS 76.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343Fix availableEPSS 46.7%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342Fix availableEPSS 50.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +10 more +12 moreXStream can cause a Denial of ServiceCVE-2021-21341Public exploitFix availableEPSS 77.8%7.5 High
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreIn intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on...CVE-2021-28971Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +2 more +4 moreIn drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug...CVE-2021-28972Fix available6.7 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreA race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5...CVE-2021-28964Fix available4.7 Medium
- lxml, debian linux, fedoraproject fedora +2 more +4 morelxml vulnerable to Cross-Site ScriptingCVE-2021-28957Fix available6.1 Medium
- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire...CVE-2021-28952Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU"...CVE-2021-28950Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers...CVE-2021-28951Fix available5.5 Medium
- http-proxy-agent project http-proxy-agent, fedoraproject fedora, redhat enterprise linux +1 more +3 moreResource Exhaustion Denial of Service in http-proxy-agentCVE-2019-10196Fix available9.8 Critical
- Show moreLoading…