Skip to contentFedoraproject vulnerabilities
Newest
- gitpython-developers gitpython, debian linux, fedoraproject fedora +2 moreRemote Code Execution (RCE)CVE-2022-24439Public exploitFix available8.1 High
- awstats, debian linux, fedoraproject fedora +2 moreAWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:...CVE-2022-46391Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...CVE-2022-4907Fix available8.8 High
- capnproto capnp, capnproto, fedoraproject fedora +2 moreCap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list.CVE-2022-46149Fix available5.4 Medium
- qemu, fedoraproject fedora +1 moreAn integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization...CVE-2022-4172Fix available6.5 Medium
- qemu, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreAn out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The...CVE-2022-4144Fix available6.5 Medium
- gnu emacs, debian linux, fedoraproject fedora +2 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-45939Fix available7.8 High
- linux layer 2 tunneling protocol, fedoraproject fedora, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when...CVE-2022-4129Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth...CVE-2022-45934Public exploitFix available7.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider libraryCVE-2022-45152Fix available9.1 Critical
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-4141Fix available7.3 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +1 more +3 moreMissing length validation of user displayname in nextcloud serverCVE-2022-393463.5 Low
- systemd project systemd, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a...CVE-2022-45873Fix available5.5 Medium
- qpress project qpress, fedoraproject fedora +1 moreqpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup...CVE-2022-458665.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle stored-XSS vulnerability in some "social" user profile fieldsCVE-2022-45151Fix available5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle reflected cross-site scripting vulnerability in policy toolCVE-2022-45150Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreCross-Site Request Forgery in MoodleCVE-2022-45149Fix available5.4 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 moreA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.1 allows an...CVE-2022-44789Public exploitFix available8.8 High
- libarchive, debian linux, fedoraproject fedora +1 more +3 moreIn libarchive 3.6.1, the software does not check for an error after calling calloc function that...CVE-2022-36227Fix available9.8 Critical
- ruby-lang cgi, ruby, fedoraproject fedora +2 moreHTTP response splitting in CGICVE-2021-33621Fix available8.8 High
- freerdp, fedoraproject fedora +1 moreMissing input length validation in `drive` channel in FreeRDPCVE-2022-41877Fix available4.6 Medium
- freerdp, fedoraproject fedora +1 moreMissing path sanitation with `drive` channel in FreeRDPCVE-2022-39347Fix available2.6 Low
- freerdp, fedoraproject fedora +1 moreHeap buffer overflow in urbdrc channelCVE-2022-39320Fix available5.5 Medium
- freerdp, fedoraproject fedora +1 moreMissing length validation in urbdrc channel in FreeRDPCVE-2022-39319Fix available4.6 Medium
- freerdp, fedoraproject fedora +1 moreDivision by zero in urbdrc channel in FreeRDPCVE-2022-39318Fix available4.8 Medium
- freerdp, fedoraproject fedora +1 moreOut of bounds read in zgfx decoder in FreeRDPCVE-2022-39317Fix available4.6 Medium
- freerdp, fedoraproject fedora +1 moreOut of bound read in FreeRDPCVE-2022-39316Fix available4.8 Medium
- fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 moreA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...CVE-2022-2601Fix available8.6 High
- gnome nautilus, fedoraproject fedora +1 moreGNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a...CVE-2022-37290Fix available5.5 Medium
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...CVE-2022-45188Fix available7.8 High
- snakeyaml, fedoraproject fedora +1 moreStack Overflow in SnakeyamlCVE-2022-41854Fix available5.8 Medium
- invisible-island xterm, fedoraproject fedora +1 morexterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have...CVE-2022-45063Fix available9.8 Critical
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- xfce xfce4-settings, debian linux, fedoraproject fedora +2 moreIn Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection...CVE-2022-45062Fix available9.8 Critical
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- varnish-software varnish cache, varnish cache project cache, debian linux +2 more +4 moreAn HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x...CVE-2022-45060Fix available7.5 High
- varnish cache project cache, fedoraproject fedora +1 moreAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request...CVE-2022-45059Public exploitFix available7.5 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreNetlogon RPC Elevation of Privilege VulnerabilityCVE-2022-38023Fix available8.1 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos Elevation of Privilege VulnerabilityCVE-2022-37967Fix available7.2 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos RC4-HMAC Elevation of Privilege VulnerabilityCVE-2022-37966Fix available8.1 High
- debian linux, sysstat, fedoraproject fedora +2 moresysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflowCVE-2022-39377Fix available7.0 High
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c....CVE-2022-3821Fix available5.5 Medium
- apache commons bcel, fedoraproject fedora +1 moreApache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writingCVE-2022-42920Fix available9.8 Critical
- pixman, debian linux, fedoraproject fedora +2 moreIn libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer...CVE-2022-44638Fix available8.8 High
- python, fedoraproject fedora +1 morePython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...CVE-2022-42919Fix available7.8 High
- fluent fluentd, fedoraproject fedora +1 moreFluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)CVE-2022-39379Fix availableEPSS 45.0%3.1 Low
- apple ipados, macos, safari +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1,...CVE-2022-42824Fix available5.5 Medium
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS...CVE-2022-42823Fix available8.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS...CVE-2022-42799Fix available6.1 Medium
- fedoraproject fedora, xen +1 morex86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC...CVE-2022-42327Fix available7.1 High
- Show moreLoading…