Skip to contentFedoraproject vulnerabilities
Newest
- mechanize project mechanize, fedoraproject fedora +1 moreAuthorization header leak in rubygem MechanizeCVE-2022-31033Fix available5.9 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in...CVE-2022-26362Fix available6.4 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to...CVE-2022-26364Fix available6.7 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to...CVE-2022-26363Fix available6.7 Medium
- debian linux, firejail project firejail, fedoraproject fedora +2 moreA Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a...CVE-2022-31214Fix available7.8 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813Public exploitFix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreInformation Disclosure in mod_lua with websocketsCVE-2022-30556Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of serviceCVE-2022-30522Fix availableEPSS 89.9%7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebodyCVE-2022-29404Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()CVE-2022-28615Fix available9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()CVE-2022-28614Fix available5.3 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smugglingCVE-2022-26377Public exploitFix availableEPSS 21.1%7.5 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreCVE-2022-1973 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1973Fix available7.1 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Write in vim/vimCVE-2022-2000Fix available7.8 High
- jmespath, fedoraproject fedora +1 moreJMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferableCVE-2022-32511Fix available9.8 Critical
- kubernetes cri-o, fedoraproject fedora, redhat enterprise linux +1 more +3 moreNode DOS by way of memory exhaustion through ExecSync request in CRI-OCVE-2022-1708Fix available7.5 High
- containerd, debian linux, fedoraproject fedora +2 morecontainerd CRI plugin: Host memory exhaustion through ExecSyncCVE-2022-31030Fix available5.5 Medium
- emicklei emicklei/go-restful, go-restful project go-restful, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in emicklei/go-restfulCVE-2022-1996Fix available9.3 Critical
- cookiecutter project cookiecutter, fedoraproject fedora +1 moreCommand InjectionCVE-2022-24065Fix available8.1 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 morenet/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to...CVE-2022-32250Public exploitFix available7.8 High
- fedoraproject fedora, redhat 389 directory server, directory server +1 more +3 moreAn access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that...CVE-2022-1949Fix available7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-1942Fix available7.8 High
- bottlepy bottle, debian linux, fedoraproject fedora +2 moreDenial of service in bottleCVE-2022-31799Fix available9.8 Critical
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in vim/vimCVE-2022-1927Fix available7.8 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreWith shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If...CVE-2022-1789Fix available6.8 Medium
- liblouis, fedoraproject fedora +1 moreLiblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as...CVE-2022-31783Fix available5.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse After Free in vim/vimCVE-2022-1898Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Write in vim/vimCVE-2022-1897Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in...CVE-2022-30789Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G...CVE-2022-30788Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreAn integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G...CVE-2022-30787Fix available6.7 Medium
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G...CVE-2022-30786Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary...CVE-2022-30785Fix available6.7 Medium
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through...CVE-2022-30784Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreAn invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic...CVE-2022-30783Fix available6.7 Medium
- apple macos, cups, mac os x +2 more +4 moreA logic issue was addressed with improved state management. This issue is fixed in Security...CVE-2022-26691Fix available6.7 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2022-1886Fix available7.1 High
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows...CVE-2022-1355Fix available6.1 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Read in vim/vimCVE-2022-1851Fix available7.8 High
- logrotate project logrotate, fedoraproject fedora +1 moreA vulnerability was found in logrotate in how the state file is created. The state file is used...CVE-2022-1348Fix available6.5 Medium
- halibut project halibut, fedoraproject fedora +1 moreA use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a...CVE-2021-42614Fix available7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of...CVE-2021-42613Fix available7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a...CVE-2021-42612Fix available7.8 High
- jpadilla pyjwt, fedoraproject fedora +1 moreKey confusion through non-blocklisted public key formats in PyJWTCVE-2022-29217Fix available7.4 High
- golang go, fedoraproject fedora, netapp beegfs csi driver +2 moregolang.org/x/sys/unix has Incorrect privilege reporting in syscallCVE-2022-29526Fix available5.3 Medium
- smarty, debian linux, fedoraproject fedora +2 morePHP Code Injection by malicious block or filename in SmartyCVE-2022-29221Public exploitFix available8.8 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreIncorrect Calculation in moodleCVE-2022-30600Public exploitFix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreSQL injection in moodleCVE-2022-30599Fix available9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information in moodleCVE-2022-30598Fix available4.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExternal Control of Assumed-Immutable Web Parameter in moodleCVE-2022-30597Fix available5.3 Medium
- Show moreLoading…