Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote...CVE-2021-37956Fix available8.8 High
- debian linux, flatpak, fedoraproject fedora +2 moreSandbox bypass via recent VFS-manipulating syscallsCVE-2021-41133Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to...CVE-2021-37975In KEVPublic exploitFix availableEPSS 34.9%8.8 High
- apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 morePath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)CVE-2021-42013In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- debian linux, fedoraproject fedora, xen +2 morePCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned...CVE-2021-28702Fix available7.6 High
- grafana, fedoraproject fedora +1 moreSnapshot authentication bypass in grafanaCVE-2021-39226In KEVFix availableEPSS 99.9%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morePath traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49CVE-2021-41773In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morenull pointer dereference in h2 fuzzingCVE-2021-41524Fix availableEPSS 25.8%7.5 High
- moby, fedoraproject fedora +1 moreInsufficiently restricted permissions on data directory in Docker EngineCVE-2021-41091Public exploitFix available6.3 Medium
- cli, docker command line interface, fedoraproject fedora +2 moreDocker CLI leaks private registry credentials to registry-1.docker.ioCVE-2021-41092Fix available5.4 Medium
- redis, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow issue with strings in RedisCVE-2021-41099Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platformsCVE-2021-32762Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow issue with intsets in RedisCVE-2021-32687Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreDoS vulnerability in RedisCVE-2021-32675Public exploitFix availableEPSS 16.1%7.5 High
- redis, debian linux, fedoraproject fedora +5 more +7 moreVulnerability in Lua Debugger in RedisCVE-2021-32672Fix available5.3 Medium
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow issue with Streams in RedisCVE-2021-32627Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreVulnerability in handling large ziplistsCVE-2021-32628Fix availableEPSS 13.0%7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreLua scripts can overflow the heap-based Lua stack in RedisCVE-2021-32626Fix availableEPSS 15.6%7.5 High
- containerd, debian linux, fedoraproject fedora +2 moreInsufficiently restricted permissions on plugin directoriesCVE-2021-41103Fix available5.9 Medium
- moby, fedoraproject fedora +1 more`docker cp` allows unexpected chmod of host filesCVE-2021-41089Fix available2.8 Low
- qemu, fedoraproject fedora +1 moreAn out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw...CVE-2021-3638Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreprealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows...CVE-2021-41864Fix available7.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki allows a denial of serviceCVE-2021-41800Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...CVE-2021-41799Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...CVE-2021-41798Fix available6.1 Medium
- microsoft usbredir, debian linux, fedoraproject fedora +1 more +3 moreA use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the...CVE-2021-3700Fix available6.4 Medium
- openbsd openssh, fedoraproject fedora, netapp active iq unified manager +14 more +16 moresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...CVE-2021-41617Public exploitFix available7.0 High
- microsoft hivex, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted...CVE-2021-3622Fix available4.3 Medium
- google chrome, fedoraproject fedora, google chromium indexed db api +2 moreUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30633In KEVFix availableEPSS 33.2%9.6 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 moreOut of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to...CVE-2021-30632In KEVPublic exploitFix availableEPSS 63.2%8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote...CVE-2021-30630Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30629Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30628Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30627Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote...CVE-2021-30626Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30625Fix availableEPSS 10.1%8.8 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreloop_rw_iter in fs/io_uring.c in the Linux kernel through 5.14.6 allows local users to gain...CVE-2021-41073Public exploitFix available7.8 High
- bytecodealliance wasmtime, fedoraproject fedora +1 moreWrong type for `Linker`-define functions when used across two `Engine`sCVE-2021-39219Fix available6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in WasmtimeCVE-2021-39218Fix available6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreUse after free passing `externref`s to Wasm in WasmtimeCVE-2021-39216Fix available6.3 Medium
- debian linux, linux kernel, fedoraproject fedora +16 more +18 moreA use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls...CVE-2021-3752Fix available7.1 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflowCVE-2021-39275Fix availableEPSS 39.4%9.8 Critical
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vimCVE-2021-3796Fix available8.2 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3778Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3744Fix available5.5 Medium
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- Show moreLoading…