Skip to contentFedoraproject vulnerabilities
Newest
- mpmath, fedoraproject fedora +1 moreReDOS in MpmathCVE-2021-29063Fix available7.5 High
- gdraheim zziplib, debian linux, fedoraproject fedora +2 moreInfinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the...CVE-2020-18442Fix available3.3 Low
- qemu, debian linux, fedoraproject fedora +2 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior...CVE-2021-3608Fix available6.0 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...CVE-2021-3607Fix available6.0 Medium
- quassel-irc quassel, fedoraproject fedora +1 moreQuassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a...CVE-2021-34825Fix available7.5 High
- phpmailer, fedoraproject fedora +1 moreInclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailerCVE-2021-3603Fix available8.1 High
- phpmailer project phpmailer, fedoraproject fedora +1 moreRemote Code Execution vulnerability in PHPMailer 6.4.1 running on WindowsCVE-2021-34551Fix available8.1 High
- actix actix-http, fedoraproject fedora +1 moreHTTP Request Smuggling in actix-httpCVE-2021-38512Fix available7.5 High
- jdom, apache solr, tika +3 more +5 moreXML External Entity (XXE) Injection in JDOMCVE-2021-33813Fix availableEPSS 19.4%7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote...CVE-2021-30553Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who...CVE-2021-30552Fix available8.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30551In KEVPublic exploitFix availableEPSS 64.7%8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who...CVE-2021-30550Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who...CVE-2021-30549Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30548Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreOut of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30547Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30546Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker...CVE-2021-30545Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...CVE-2021-30544Fix available8.8 High
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3595Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3594Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3593Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3592Fix available3.8 Low
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreNULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Fix availableEPSS 52.1%7.5 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-31812Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileCVE-2021-31811Fix available5.5 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an atta…CVE-2021-229159.8 Critical
- xscreensaver project xscreensaver, fedoraproject fedora +1 moreXScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs....CVE-2021-34557Fix available4.6 Medium
- trusteddomain opendmarc, fedoraproject fedora +1 moreOpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer...CVE-2021-34555Fix available7.5 High
- the fuck project fuck, fedoraproject fedora +1 moreThe Fuck Arbitrary File Deletion via Path TraversalCVE-2021-34363Fix available9.1 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641Fix availableEPSS 51.8%5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflowCVE-2021-26691Fix availableEPSS 68.1%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereferenceCVE-2021-26690Public exploitFix availableEPSS 65.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byteCVE-2020-35452Fix availableEPSS 53.2%7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereferenceCVE-2020-13950Fix availableEPSS 50.0%7.5 High
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connectionsCVE-2019-17567Fix availableEPSS 59.7%5.3 Medium
- debian linux, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreObservable response discrepancy in some Intel(R) Processors may allow an authorized user to...CVE-2021-0089Fix available6.5 Medium
- intel brand verification tool, fedoraproject fedora, intel celeron processors firmware +4 more +6 moreImproper permissions in the installer for the Intel(R) Brand Verification Tool before version 11...CVE-2021-00866.5 Medium
- tiangolo fastapi, fedoraproject fedora +1 moreCross-Site Request Forgery (CSRF) in FastAPICVE-2021-32677Fix available8.2 High
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative execution with Floating-Point Value InjectionCVE-2021-263145.5 Medium
- htmldoc project htmldoc, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf...CVE-2021-26252Fix available7.8 High
- microsoft .net, .net core, fedoraproject fedora +8 more +10 moreASP.NET Core Denial of Service VulnerabilityCVE-2021-31957Fix available5.9 Medium
- ntpsec, fedoraproject fedora +1 morentpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate...CVE-2021-22212Fix available4.0 Medium
- gnupg libgcrypt, debian linux, fedoraproject fedora +8 more +10 moreLibgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...CVE-2021-33560Public exploitFix available7.5 High
- academysoftwarefoundation openexr, fedoraproject fedora +1 moreA heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...CVE-2021-23169Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30543Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30542Fix available8.8 High
- dino, fedoraproject fedora +1 moreDino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new...CVE-2021-33896Fix available5.3 Medium
- debian linux, fedoraproject fedora, isync project isync +2 moreA flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a...CVE-2021-3578Fix available7.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found...CVE-2021-3573Fix available6.4 Medium
- Show moreLoading…