Skip to contentFedoraproject vulnerabilities
Newest
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...CVE-2021-22945Fix available9.1 Critical
- rencode project rencode, fedoraproject fedora +1 moreInfinite Loop in rencodeCVE-2021-40839Public exploitFix available7.5 High
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the libtpms code that may cause access beyond the boundary of internal...CVE-2021-3746Fix available6.5 Medium
- flask-restx project flask-restx, fedoraproject fedora +1 moreRegular Expression Denial of Service in flask-restxCVE-2021-32838Fix available7.5 High
- ribbonsoft dxflib, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of...CVE-2021-21897Fix available8.8 High
- saltstack salt, fedoraproject fedora +1 moreImproper Authentication in SaltStack SaltCVE-2021-22004Fix available6.4 Medium
- xen, debian linux, fedoraproject fedora +2 moreAnother race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned...CVE-2021-28701Fix available7.8 High
- artifex ghostscript, fedoraproject fedora +1 moreA trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript...CVE-2021-3781Fix availableEPSS 83.9%9.9 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreExposure of Resource to Wrong Sphere in saltCVE-2021-21996Fix available7.5 High
- lcdf gifsicle, fedoraproject fedora +1 moreThe find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.CVE-2020-19752Fix available7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to...CVE-2021-40346Public exploitFix availableEPSS 58.8%7.5 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer...CVE-2021-39254Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8...CVE-2021-39253Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.CVE-2021-39252Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...CVE-2021-39251Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is...CVE-2021-35269Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the...CVE-2021-35268Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting...CVE-2021-35267Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied...CVE-2021-35266Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an...CVE-2021-33289Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the...CVE-2021-33287Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2021-33285Fix available7.8 High
- botan project botan, mozilla thunderbird, fedoraproject fedora +2 moreThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...CVE-2021-40529Fix available5.9 Medium
- cryptopp crypto\+\+, fedoraproject fedora +1 moreThe ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during...CVE-2021-40530Fix available5.9 Medium
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3770Fix available8.6 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30624Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Bookmarks in Google Chrome prior to 93.0.4577.63 allowed an attacker who...CVE-2021-30623Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebApp Installs in Google Chrome prior to 93.0.4577.63 allowed an attacker who...CVE-2021-30622Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30621Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInsufficient policy enforcement in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30620Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Autofill in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30619Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in DevTools in Google Chrome prior to 93.0.4577.63 allowed a remote...CVE-2021-30618Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 morePolicy bypass in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to bypass...CVE-2021-30617Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Media in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30616Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreInappropriate implementation in Navigation in Google Chrome prior to 93.0.4577.63 allowed a...CVE-2021-30615Fix available6.5 Medium
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreHeap buffer overflow in TabStrip in Google Chrome prior to 93.0.4577.63 allowed an attacker who...CVE-2021-30614Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Base internals in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...CVE-2021-30613Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebRTC in Google Chrome on Linux, ChromeOS prior to 93.0.4577.63 allowed an...CVE-2021-30612Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in WebRTC in Google Chrome on Linux, ChromeOS prior to 93.0.4577.63 allowed an...CVE-2021-30611Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Extensions API in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...CVE-2021-30610Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Sign-In in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30609Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Web Share in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to...CVE-2021-30608Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Permissions in Google Chrome prior to 93.0.4577.63 allowed a remote attacker...CVE-2021-30607Fix available8.8 High
- fedoraproject fedora, microsoft edge, edge chromium +1 more +3 moreUse after free in Blink in Google Chrome prior to 93.0.4577.63 allowed an attacker who convinced...CVE-2021-30606Fix available8.8 High
- python pillow, fedoraproject fedora +1 moreRegular Expression Denial of Service (ReDoS)CVE-2021-23437Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreA race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4...CVE-2021-40490Fix available7.0 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +2 moreURL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidcCVE-2021-39191Fix available4.7 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- cyrus imap, debian linux, fedoraproject fedora +2 moreCyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute...CVE-2021-33582Fix available7.5 High
- element-hq synapse, fedoraproject fedora +1 moreImproper authorisation of /members discloses room membership to non-membersCVE-2021-39164Fix available3.1 Low
- Show moreLoading…