Skip to contentFedoraproject vulnerabilities
Newest
- puma, debian linux, fedoraproject fedora +2 moreHTTP Request Smuggling in pumaCVE-2022-24790Fix available9.1 Critical
- mediawiki, debian linux, fedoraproject fedora +2 moreAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...CVE-2022-28202Fix available6.1 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreheap buffer overflow in get_one_sourceline in vim/vimCVE-2022-1160Fix available7.3 High
- vim, vim vim/vim, debian linux +2 more +4 moreUse after free in utf_ptr2char in vim/vimCVE-2022-1154Fix available7.8 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input...CVE-2022-1122Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreUse after Free in tc_new_tfilter allowing for privilege escalation in Linux KernelCVE-2022-1055Fix available8.6 High
- libarchive, fedoraproject fedora +1 moreLibarchive v3.6.0 was discovered to contain an out-of-bounds read via the component...CVE-2022-26280Fix available6.5 Medium
- linux kernel, fedoraproject fedora, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreCVE-2022-1015 affecting package kernel for versions less than 5.15.37.1-2CVE-2022-1015Public exploitFix available6.6 Medium
- gnu gcc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morelibiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as...CVE-2022-27943Fix available5.5 Medium
- broadcom tcpreplay, fedoraproject fedora +1 moretcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.CVE-2022-27942Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common...CVE-2022-27941Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.CVE-2022-27940Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.CVE-2022-27939Fix available5.5 Medium
- kiwix libkiwix, fedoraproject fedora +1 morelibkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search...CVE-2022-27920Fix available6.1 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 moreAn out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...CVE-2022-0995In KEVPublic exploitFix available7.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreSQL Injection in MoodleCVE-2022-0983Fix available8.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreA flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of...CVE-2022-0500Fix available7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreAn out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was...CVE-2021-4157Fix available8.0 High
- containerd imgcrypt, fedoraproject fedora +1 moreIncorrect Authorization in imgcryptCVE-2022-24778Fix available7.5 High
- powerdns authoritative server, recursor, fedoraproject fedora +2 moreIn PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and...CVE-2022-27227Fix available7.5 High
- netatalk, western digital my cloud, my cloud home +12 more +14 moreWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in NetatalkCVE-2022-22995Fix available10.0 Critical
- nokogiri, zlib, apple mac os x +28 more +30 moreNokogiri affected by zlib's Out-of-bounds Write vulnerabilityCVE-2018-25032Public exploitFix availableEPSS 51.7%7.5 High
- debian linux, moby, fedoraproject fedora +1 more +3 moreDefault inheritable capabilities for linux container should be emptyCVE-2022-24769Fix available5.9 Medium
- linux kernel, fedoraproject fedora +1 moreA vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the...CVE-2021-4148Fix available5.5 Medium
- redhat 389 directory server, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in the 389 Directory Server that allows expired passwords to access the...CVE-2022-0996Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreIn the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4...CVE-2022-27666Public exploitFix available7.8 High
- openvpn, debian linux, fedoraproject fedora +2 moreOpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...CVE-2022-0547Fix available9.8 Critical
- golang ssh, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moregolang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +27 more +29 moreA flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers...CVE-2022-1011Public exploitFix available7.8 High
- paramiko, debian linux, fedoraproject fedora +2 moreRace Condition in ParamikoCVE-2022-24302Fix available5.9 Medium
- fedoraproject fedora, paypal braintree\/sanitize-url +1 moreCross-site Scripting (XSS)CVE-2021-23648Fix available5.4 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog pluginCVE-2022-24729Fix available6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreCross-site Scripting in CKEditor4CVE-2022-24728Fix available5.4 Medium
- isc bind, fedoraproject fedora, netapp h300e firmware +8 more +10 moreDoS from specifically crafted TCP packetsCVE-2022-0396Fix available5.3 Medium
- isc bind, fedoraproject fedora, juniper junos +9 more +11 moreDNS forwarders - cache poisoning vulnerabilityCVE-2021-25220Fix available6.8 Medium
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- fedoraproject fedora, nicotine-plus nicotine\+ +1 moreNicotine+ DoS on Null Character in Download RequestCVE-2021-45848Fix available7.5 High
- apache http server, debian linux, fedoraproject fedora +1 more +3 moremod_sed: Read/write beyond boundsCVE-2022-23943Public exploitFix availableEPSS 50.4%9.8 Critical
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721Fix availableEPSS 41.9%9.1 Critical
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCVE-2022-22720Public exploitFix availableEPSS 28.2%9.8 Critical
- apache http server, apple mac os x, macos +3 more +5 moremod_lua Use of uninitialized value of in r:parsebodyCVE-2022-22719Fix availableEPSS 69.8%7.5 High
- fishshell fish, debian linux, fedoraproject fedora +1 more +3 moreInjection in fishCVE-2022-20001Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow occurs in vim in vim/vimCVE-2022-0943Fix available8.4 High
- liblouis, apple ipados, iphone os +4 more +6 moreLiblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c ...CVE-2022-26981Fix available7.8 High
- fedoraproject fedora, flippercode wp google map plugin (wordpress plugin), weplugins wp maps +2 moreWordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-256005.4 Medium
- plugin-planet contact form x, fedoraproject fedora, jeff starr contact form x (wordpress plugin) +2 moreWordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2022-256014.7 Medium
- cobbler cobbler/cobbler, cobbler project cobbler, fedoraproject fedora +2 moreImproper Authorization in cobbler/cobblerCVE-2022-0860Fix available8.2 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreOut-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0924Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0909Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in...CVE-2022-0908Fix available7.7 High
- Show moreLoading…