Skip to contentFedoraproject vulnerabilities
Newest
- element-hq synapse, fedoraproject fedora +1 moreAdding a private/unlisted room to a community exposes room metadata in an unauthorised manner.CVE-2021-39163Fix available3.1 Low
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- fetchmail, fedoraproject fedora +1 moreFetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such...CVE-2021-39272Fix available5.9 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, fedoraproject fedora +2 moreIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the...CVE-2021-34434Fix available5.3 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28696Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28695Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28694Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moregrant table v2 status pages may remain accessible after de-allocation Guest get permitted access...CVE-2021-28697Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morelong running loops in grant table handling In order to properly monitor resource use, Xen...CVE-2021-28698Fix available5.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreinadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant...CVE-2021-28699Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morexen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to...CVE-2021-28700Fix available4.9 Medium
- squashfs-tools project squashfs-tools, debian linux, fedoraproject fedora +1 more +3 moresquashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry...CVE-2021-40153Fix available8.1 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreCVE-2021-3739 does not affect BellSoft softwareCVE-2021-3739Fix available7.1 High
- libssh, debian linux, fedoraproject fedora +4 more +6 moreA flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two...CVE-2021-3634Fix available6.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 moreAn out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the...CVE-2021-3743Fix available7.1 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30984Fix available7.5 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30954Fix available7.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30953Fix available8.8 High
- apple ipados, macos, safari +9 more +11 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30952In KEVFix available7.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30951Fix available8.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30936Fix available8.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30934Fix available8.8 High
- apple ipados, macos, tvos +5 more +7 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30890Fix available6.1 Medium
- apple ipados, macos, tvos +5 more +7 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30887Fix available6.5 Medium
- apple ios, ipados, macos +4 more +6 morewebkit2gtk - security updateCVE-2021-30858In KEVPublic exploitFix availableEPSS 13.4%8.8 High
- apple ipados, safari, tvos +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement updateCVE-2021-30851Fix available8.8 High
- plib project plib, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreIn Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary...CVE-2021-38714Fix available8.8 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshalingCVE-2021-39150Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshalingCVE-2021-39152Fix availableEPSS 11.4%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream can cause a Denial of ServiceCVE-2021-39140Fix available6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146Fix availableEPSS 14.3%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141Public exploitFix availableEPSS 16.1%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +10 more +12 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39153Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-39144In KEVPublic exploitFix availableEPSS 98.1%8.5 High
- mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 moreThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1...CVE-2021-37750Fix available6.5 Medium
- gnome libgfbgraph, fedoraproject fedora +1 moreIn GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification...CVE-2021-39358Fix available5.9 Medium
- gnome libzapojit, fedoraproject fedora +1 moreIn GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on...CVE-2021-39360Fix available5.9 Medium
- gnome libgda, fedoraproject fedora +1 moreIn GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on...CVE-2021-39359Fix available5.9 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to...CVE-2021-30604Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreData race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to...CVE-2021-30603Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who...CVE-2021-30602Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who...CVE-2021-30601Fix available8.8 High
- Show moreLoading…