Skip to contentFedoraproject vulnerabilities
Newest
- samba, fedoraproject fedora +1 moreA flaw was found in the way samba, as an Active Directory Domain Controller, is able to support...CVE-2020-25718Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-38003In KEVPublic exploitFix availableEPSS 38.6%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker...CVE-2021-38002Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to...CVE-2021-38001Public exploitFix availableEPSS 26.7%8.8 High
- google android, chrome, debian linux +2 more +4 moreInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0...CVE-2021-38000In KEVFix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a...CVE-2021-37999Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-37998Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who...CVE-2021-37997Fix available8.8 High
- barrier project barrier, fedoraproject fedora +1 moreAn issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side...CVE-2021-420728.8 High
- golang go, fedoraproject fedora, oracle timesten in-memory database +2 moreGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...CVE-2021-41772Fix available7.5 High
- golang go, debian linux, fedoraproject fedora +2 moreImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...CVE-2021-41771Fix available7.5 High
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vimCVE-2021-3928Fix available7.3 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3927Fix available7.3 High
- udisks project udisks, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...CVE-2021-3802Fix available4.2 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreOWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is...CVE-2021-35368Fix available9.8 Critical
- libxls project libxls, fedoraproject fedora +1 moreAn issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows...CVE-2021-27836Fix available6.5 Medium
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose()...CVE-2020-27820Fix available4.7 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +6 more +8 moreAn issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent...CVE-2021-43267Public exploitFix availableEPSS 57.9%9.8 Critical
- unicode, fedoraproject fedora, starwindsoftware starwind virtual san +2 moreModerate: gcc-toolset-10-gcc security updateCVE-2021-42574Public exploitFix availableDisputedEPSS 12.9%8.3 High
- hoene hoene/libmysofa, symonics libmysofa, fedoraproject fedora +2 moreHeap-based Buffer Overflow in hoene/libmysofaCVE-2021-3756Fix available6.2 Medium
- opensc, fedoraproject fedora +1 moreStack buffer overflow issues were found in Opensc before version 0.22.0 in various places that...CVE-2021-42782Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreHeap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that...CVE-2021-42781Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA use after return issue was found in Opensc before version 0.22.0 in insert_pin function that...CVE-2021-42780Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.CVE-2021-42779Fix available5.3 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM...CVE-2021-43056Fix available5.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3903Fix available7.3 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreLame cache can be abused to severely degrade resolver performanceCVE-2021-25219Fix availableEPSS 11.2%5.3 Medium
- jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 moreXSS in the `of` option of the `.position()` utilCVE-2021-41184Public exploitFix availableEPSS 40.8%6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 moreXSS in `*Text` options of the Datepicker widgetCVE-2021-41183Fix available6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 moreXSS in the `altField` option of the Datepicker widgetCVE-2021-41182Public exploitFix availableEPSS 39.4%6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreA flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to...CVE-2021-3760Fix available7.8 High
- fedoraproject fedora, nothings stb image.h +1 moreAn issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit...CVE-2021-42716Fix available7.1 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 moreAn issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end...CVE-2021-42715Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moredp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux...CVE-2021-42327Public exploitFix available6.7 Medium
- freerdp, fedoraproject fedora +1 moreImproper region checks in FreeRDP allow out of bound write to memoryCVE-2021-41160Public exploitFix available5.3 Medium
- freerdp, fedoraproject fedora +1 moreImproper client input validation for FreeRDP gateway connections allows to overwrite memoryCVE-2021-41159Fix available5.8 Medium
- php, debian linux, fedoraproject fedora +2 more +4 morePHP-FPM memory access in root process leading to privilege escalationCVE-2021-21703Fix available7.8 High
- webkitgtk, wpewebkit wpe webkit, debian linux +1 more +3 moreBubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass...CVE-2021-42762Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-35610Fix available7.1 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication...CVE-2021-35608Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-35607Fix available6.5 Medium
- oracle mysql server, fedoraproject fedora, mariadb +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-35604Fix available5.5 Medium
- oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35603Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2021-35602Fix available5.0 Medium
- oracle mysql, fedoraproject fedora, netapp oncommand insight +2 more +4 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-35597Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Error Handling)....CVE-2021-35596Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-35591Fix available4.9 Medium
- Show moreLoading…