Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, fedoraproject fedora +1 moreUse after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to...CVE-2022-0103Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to...CVE-2022-0102Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote...CVE-2022-0101Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote...CVE-2022-0100Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who...CVE-2022-0099Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an...CVE-2022-0098Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an...CVE-2022-0097Fix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to...CVE-2022-0096Fix available8.8 High
- gnu recutils, fedoraproject fedora +1 moreAn Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90...CVE-2021-46022Fix available5.5 Medium
- gnu recutils, fedoraproject fedora +1 moreAn untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead...CVE-2021-46019Fix available5.5 Medium
- dependencytrack frontend, zabbix, debian linux +1 more +3 morePossible view of the setup pages by unauthenticated users if config file already existsCVE-2022-23134In KEVPublic exploitFix availableEPSS 95.3%3.7 Low
- dependencytrack frontend, zabbix, fedoraproject fedora +2 moreStored XSS in host groups configuration window in Zabbix FrontendCVE-2022-23133Fix available6.3 Medium
- zabbix, fedoraproject fedora, zabbix proxy, server +2 moreIncorrect permissions of [/var/run/zabbix] forces dac_overrideCVE-2022-23132Fix available3.3 Low
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suiteCVE-2022-01965.4 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suiteCVE-2022-01976.5 Medium
- debian linux, flatpak, flatpak flatpak-builder +2 more +4 moreflatpak-builder can access files outside the build directory.CVE-2022-21682Fix available7.7 High
- debian linux, fedoraproject fedora, gnome gdkpixbuf +2 moreGNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the...CVE-2021-44648Fix available8.8 High
- debian linux, flatpak, fedoraproject fedora +1 more +3 morePermissions granted to applications can be hidden from the user at install timeCVE-2021-43860Fix available8.2 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreOut-of-bounds Read in radareorg/radare2CVE-2022-0173Fix available9.6 Critical
- lua, fedoraproject fedora +1 moreLua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcnamefromcode function in ldebug...CVE-2021-44647Fix available5.5 Medium
- pypa pipenv, fedoraproject fedora +1 morePipenv's requirements.txt parsing allows malicious index url in commentsCVE-2022-21668Public exploitFix available8.0 High
- vim, vim vim/vim, apple macos +1 more +3 moreUse After Free in vim/vimCVE-2022-0156Fix available6.8 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suiteCVE-2022-01575.2 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0158Fix available6.8 Medium
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...CVE-2021-3997Fix available5.5 Medium
- smarty, debian linux, fedoraproject fedora +2 moreSandbox Escape by math function in smartyCVE-2021-29454Fix available8.1 High
- smarty, debian linux, fedoraproject fedora +2 moreAccess to restricted PHP code by dynamic static class access in smartyCVE-2021-21408Fix available8.8 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated Object Injection in Multisites in WordPressCVE-2022-21663Fix available6.6 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21664Fix available7.4 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21661Public exploitFix availableEPSS 97.8%8.0 High
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46141Fix available5.5 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46142Fix available5.5 Medium
- containerd, fedoraproject fedora +1 moreImproper Preservation of Permissions in containerdCVE-2021-43816Fix available8.0 High
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...CVE-2021-4147Fix available6.5 Medium
- nltk, nltk nltk/nltk, debian linux +1 more +3 moreInefficient Regular Expression Complexity in nltk/nltkCVE-2021-3842Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDirectory-traversal in DjangoCVE-2021-45452Fix available5.3 Medium
- djangoproject django, fedoraproject fedora +1 moreInformation disclosure in DjangoCVE-2021-45116Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreDenial-of-service in DjangoCVE-2021-45115Fix available7.5 High
- harfbuzz project harfbuzz, fedoraproject fedora +1 moreHarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from...CVE-2021-459316.5 Medium
- ultrajson project ultrajson, debian linux, fedoraproject fedora +2 moreUltraJSON vulnerable to Out-of-bounds WriteCVE-2021-45958Fix available5.5 Medium
- osgeo gdal, debian linux, fedoraproject fedora +1 more +3 moreGDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile ...CVE-2021-45943Fix available5.5 Medium
- openexr, debian linux, fedoraproject fedora +2 moreOpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:...CVE-2021-45942Fix available5.5 Medium
- debian linux, fedoraproject fedora, qt qtsvg +2 moreQt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate...CVE-2021-45930Fix available5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2021-4193Fix available5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 moreUse After Free in vim/vimCVE-2021-4192Fix available5.5 Medium
- samba, fedoraproject fedora, redhat storage +2 moreMaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670Fix available6.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets...CVE-2021-3623Fix available6.1 Medium
- wireshark, fedoraproject fedora +1 moreLarge loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet...CVE-2021-4190Fix available7.5 High
- wireshark, fedoraproject fedora +1 moreCrash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet...CVE-2021-4186Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...CVE-2021-4185Fix available7.5 High
- Show moreLoading…