Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79...CVE-2022-2611Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79...CVE-2022-2610Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a...CVE-2022-2609Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a...CVE-2022-2608Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote...CVE-2022-2607Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote...CVE-2022-2606Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to...CVE-2022-2605Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker...CVE-2022-2604Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to...CVE-2022-2603Fix available8.8 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreThe th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory,...CVE-2021-33646Fix available7.5 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreThe th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory,...CVE-2021-33645Fix available7.5 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreAn attacker who submits a crafted tar file with size in header struct being 0 may be able to...CVE-2021-33644Fix available8.1 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreAn attacker who submits a crafted tar file with size in header struct being 0 may be able to...CVE-2021-33643Fix available9.1 Critical
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- pgjdbc, postgresql jdbc driver, debian linux +1 more +3 moreSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcCVE-2022-31197Fix available7.1 High
- samba rsync, fedoraproject fedora +1 moreAn issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write...CVE-2022-29154Public exploitFix available7.4 High
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by updating almost expired delegation informationCVE-2022-30699Fix available6.5 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by introducing subdomain delegationsCVE-2022-30698Fix available6.5 Medium
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...CVE-2022-2509Fix available7.5 High
- rust-websocket project rust-websocket, fedoraproject fedora +1 moreMemory allocation based on untrusted length in rust-websocketCVE-2022-35922Fix available7.5 High
- debian linux, fedoraproject fedora, libtiff +2 more +4 moreA stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This...CVE-2022-34526Fix available6.5 Medium
- squirrel-lang squirrel, fedoraproject fedora +1 moresqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the...CVE-2021-41556Fix available10.0 Critical
- clusterlabs booth, debian linux, fedoraproject fedora +2 moreThe authfile directive in the booth config file is ignored, preventing use of authentication in...CVE-2022-2553Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreinsufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...CVE-2022-33745Fix available8.8 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle LTI module reflected XSS riskCVE-2022-35653Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Open redirect risk in mobile auto-login featureCVE-2022-35652Fix available6.1 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle Stored XSS and blind SSRF possible via SCORM track detailsCVE-2022-35651Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle Arbitrary file read when importing lesson questionsCVE-2022-35650Public exploitFix availableEPSS 53.7%7.5 High
- moodle, fedoraproject fedora +1 moreMoodle PostScript Code InjectionCVE-2022-35649Public exploitFix available9.8 Critical
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner...CVE-2022-0670Fix available9.1 Critical
- mistune project mistune, fedoraproject fedora +1 moreMistune vulnerable to catastrophic backtrackingCVE-2022-34749Fix available7.5 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...CVE-2021-46829Fix available7.8 High
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2022-21537Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2022-21534Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21531Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21530Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21529Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21528Fix available5.5 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21527Fix available5.5 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21526Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21525Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2022-21522Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2022-21517Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2022-21515Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21509Fix available5.5 Medium
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- wavpack, fedoraproject fedora +1 moreA null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log:...CVE-2022-2476Fix available5.5 Medium
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21549Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21541Fix available5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21540Fix available5.3 Medium
- Show moreLoading…