Skip to contentFedoraproject vulnerabilities
Newest
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows...CVE-2021-4184Fix available7.5 High
- wireshark, fedoraproject fedora, oracle http server +1 more +3 moreCrash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture fileCVE-2021-4183Fix available5.5 Medium
- wireshark, fedoraproject fedora, oracle http server +1 more +3 moreCrash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service...CVE-2021-4182Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreCrash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...CVE-2021-4181Fix available7.5 High
- vim, vim vim/vim, apple mac os x +2 more +4 moreUse After Free in vim/vimCVE-2021-4187Fix available6.8 Medium
- celeryproject celery, fedoraproject extra packages for enterprise linux, fedora +2 moreStored Command InjectionCVE-2021-23727Fix available7.5 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- vim, vim vim/vim, apple mac os x +2 more +4 moreUse After Free in vim/vimCVE-2021-4173Fix available6.8 Medium
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vimCVE-2021-4166Fix available7.1 High
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.CVE-2021-45471Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can...CVE-2021-45472Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit...CVE-2021-45473Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as...CVE-2021-45474Fix available6.1 Medium
- qemu, fedoraproject fedora +1 moreA DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE...CVE-2021-3929Public exploitFix available8.2 High
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...CVE-2021-31566Fix available7.8 High
- debian linux, fedoraproject fedora, libarchive +10 more +12 moreAn improper link resolution flaw while extracting an archive can lead to changing the access...CVE-2021-23177Fix available7.8 High
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819Fix available7.5 High
- containers podman, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podmanCVE-2021-4024Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of...CVE-2021-45469Fix available7.8 High
- gegl, gimp, fedoraproject fedora +1 more +3 moreGEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...CVE-2021-45463Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...CVE-2021-44733Public exploitFix available7.0 High
- webassembly binaryen, fedoraproject fedora +1 moreA Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address...CVE-2021-45293Fix available5.5 Medium
- webassembly binaryen, fedoraproject fedora +1 moreA Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm:...CVE-2021-45290Fix available7.5 High
- arm mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption...CVE-2021-45451Fix available7.5 High
- trustedfirmware mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt...CVE-2021-45450Fix available7.5 High
- apache http server, apple mac os x, macos +8 more +10 morePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierCVE-2021-44224Fix availableEPSS 82.3%8.2 High
- apache http server, apple mac os x, macos +10 more +12 morePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierCVE-2021-44790Public exploitFix availableEPSS 96.8%9.8 Critical
- vim, vim vim/vim, apple mac os x +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-4136Fix available7.3 High
- cvxopt project cvxopt, fedoraproject fedora +1 moreIncorrect Comparison in cvxoptCVE-2021-41500Fix available7.5 High
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...CVE-2021-45078Fix available7.8 High
- teeworlds, fedoraproject fedora +1 moreTeeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not...CVE-2021-43518Fix available7.8 High
- apache log4j, log4j2, cvat computer vision annotation tool +53 more +55 moreApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attackCVE-2021-45046In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...CVE-2021-4011Fix available7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...CVE-2021-4010Fix available7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...CVE-2021-4009Fix available7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...CVE-2021-4008Fix available7.8 High
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- lxml, debian linux, fedoraproject fedora +8 more +10 moreHTML Cleaner allows crafted and SVG embedded scripts to pass throughCVE-2021-43818Fix available8.2 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed...CVE-2021-38022Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38021Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664...CVE-2021-38020Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38019Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a...CVE-2021-38018Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed...CVE-2021-38017Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45...CVE-2021-38016Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker...CVE-2021-38015Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38014Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664...CVE-2021-38013Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...CVE-2021-38012Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38011Fix available8.8 High
- Show moreLoading…