Skip to contentFedoraproject vulnerabilities
Newest
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreCross-site Scripting in moodleCVE-2022-30596Fix available5.4 Medium
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA use after free in the Linux kernel File System notify functionality was found in the way user...CVE-2022-1998Fix available7.8 High
- artifex mujs, debian linux, fedoraproject fedora +2 moreIn Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as...CVE-2022-30975Fix available5.5 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 morecompile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...CVE-2022-30974Fix available5.5 Medium
- linuxfoundation runc, fedoraproject fedora +1 moreIncorrect Default Permissions in runcCVE-2022-29162Fix available5.9 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in vim/vimCVE-2022-1769Fix available6.6 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-1733Fix available6.6 Medium
- redhat ignition, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIgnition config accessible to unprivileged software on VMwareCVE-2022-1706Fix available6.5 Medium
- denx u-boot, fedoraproject fedora +1 morenfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...CVE-2022-30767Fix available9.8 Critical
- vim, vim vim/vim, apple macos +2 more +4 moreBuffer Over-read in function grab_file_name in vim/vimCVE-2022-1720Fix available6.6 Medium
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1587Fix available9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreURL Restriction Bypass in plantuml/plantumlCVE-2022-13797.2 High
- dokuwiki, fedoraproject fedora +1 moreHTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS)...CVE-2022-28919Fix available6.1 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreNULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vimCVE-2022-1674Fix available6.6 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing...CVE-2022-1623Fix available5.5 Medium
- libtiff, apple iphone os, macos +4 more +6 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing...CVE-2022-1622Fix available5.5 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +9 more +11 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-29145Fix available7.5 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +9 more +11 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-29117Public exploitFix available7.5 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +14 more +16 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2022-23267Fix available7.5 High
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in function find_next_quote in vim/vimCVE-2022-1629Fix available6.6 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap buffer overflow in vim_strncpy find_word in vim/vimCVE-2022-1621Fix available7.3 High
- vim, vim vim/vim, apple macos +1 more +3 moreNULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vimCVE-2022-1620Fix available6.6 Medium
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619Fix available6.1 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse after free in append_command in vim/vimCVE-2022-1616Fix available7.3 High
- ecdsautils project ecdsautils, debian linux, fedoraproject fedora +2 moreTrivial signature forgery in ecdsautilsCVE-2022-24884Fix available10.0 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 moreA logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...CVE-2022-27337Fix available6.5 Medium
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information...CVE-2022-29500Fix available8.8 High
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of...CVE-2022-29501Fix available8.8 High
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of...CVE-2022-29502Fix available9.8 Critical
- keylime, fedoraproject fedora +1 moreTenant and Verifier might not use the same registrar dataCVE-2022-1053Fix available9.1 Critical
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslogCVE-2022-24903Public exploitFix available8.1 High
- squirrel-lang squirrel, fedoraproject fedora +1 morethread_call in sqbaselib.cpp in SQUIRREL 3.2 lacks a certain sq_reservestack call.CVE-2022-30292Public exploitFix available10.0 Critical
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20796Fix available6.5 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022CVE-2022-20785Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20771Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20770Fix available8.6 High
- fedoraproject fedora, libsdl sdl ttf +1 moreSDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function...CVE-2022-27470Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreTcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The...CVE-2022-28487Fix available7.5 High
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- debian linux, tuxera ntfs-3g, fedoraproject fedora +2 morentfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2....CVE-2021-46790Fix available7.8 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c...CVE-2022-29968Public exploitFix available7.8 High
- angular, angularjs, fedoraproject fedora +1 more +3 moreRegular Expression Denial of Service (ReDoS)CVE-2022-25844Fix available5.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMissing authorization in MoodleCVE-2022-0984Fix available4.3 Medium
- podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 morePodman publishes a malicious image to public registriesCVE-2022-1227Public exploitFix available8.8 High
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not...CVE-2021-3839Fix available7.5 High
- samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...CVE-2022-29869Fix available5.3 Medium
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreA Malformed Lua script can crash RedisCVE-2022-24736Fix available3.3 Low
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreLua scripts can be manipulated to overcome ACL rules in RedisCVE-2022-24735Fix available3.9 Low
- Show moreLoading…