Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed...CVE-2023-5858Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5857Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5856Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5855Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5854Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5853Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5852Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5851Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5850Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to...CVE-2023-5849Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5482Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5480Fix available6.1 Medium
- element-hq synapse, fedoraproject fedora +1 moreSynapse vulnerable to leak of remote user device informationCVE-2023-43796Fix available5.3 Medium
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...CVE-2023-34058Fix available7.1 High
- apple ipados, macos, safari +6 more +8 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...CVE-2023-42852Fix available8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...CVE-2023-41983Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...CVE-2023-5472Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +6 more +8 moreXorg-x11-server: use-after-free bug in destroywindowCVE-2023-5380Fix available4.7 Medium
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- fedora, red hat 3scale api management platform 2, rmagick +2 moreDraw while calling getdrawinfo()CVE-2023-5349Fix available5.3 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: mod_macro buffer over-readCVE-2023-31122Fix available7.5 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare2CVE-2023-56865.1 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTCVE-2023-45802Public exploitFix available5.9 Medium
- redis, debian linux, fedoraproject fedora +2 moreRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.CVE-2023-45145Fix available3.6 Low
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 moreStored XSS vulnerability in RoundcubeCVE-2023-5631In KEVFix availableEPSS 76.3%6.1 Medium
- nodejs node, node.js, fedoraproject fedora +2 moreVarious `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In...CVE-2023-39332Fix available9.8 Critical
- nodejs node, node.js, fedoraproject fedora +2 moreWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...CVE-2023-38552Fix available7.5 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2023-22084Fix available4.9 Medium
- python urllib3, fedoraproject fedora +1 moreRequest body not stripped after redirect in urllib3CVE-2023-45803Fix available4.2 Medium
- apache traffic server, fedoraproject fedora +1 moreApache Traffic Server: Malformed http/2 frames can cause an abortCVE-2023-39456Fix availableEPSS 58.3%7.5 High
- apache traffic server, fedoraproject fedora +1 moreApache Traffic Server: s3_auth plugin problem with hash calculationCVE-2023-41752Fix available7.5 High
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race...CVE-2023-41914Fix available7.0 High
- wordpress, fedoraproject fedora +1 moreWordPress < 6.3.2 is vulnerable to Broken Access ControlCVE-2023-39999Fix available4.3 Medium
- nodejs undici, fedoraproject fedora +1 moreUndici's cookie header not cleared on cross-origin redirect in fetchCVE-2023-45143Fix available3.9 Low
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a...CVE-2023-5484Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5475Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5487Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5218Fix available8.8 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreUse After Free in vim/vimCVE-2023-5535Fix available7.8 High
- go standard library net/http, golang go, http2 +4 more +6 moreHTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325Public exploitFix available7.5 High
- hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 moreHCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3CVE-2023-37536Fix available8.2 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- curl, fedoraproject fedora, haxx libcurl +15 more +17 moreThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is...CVE-2023-38545Public exploitFix availableEPSS 78.3%9.8 Critical
- element-hq synapse, fedoraproject fedora +1 morematrix-synapse vulnerable to denial of service due to malicious server ACL eventsCVE-2023-45129Fix available4.9 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc busy rpc multiple listener dosCVE-2023-42670Fix available6.5 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissionsCVE-2023-4091Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()CVE-2023-39194Fix available3.2 Low
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables sctp out-of-bounds read in match_flags()CVE-2023-39193Fix available6.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables out-of-bounds read in u32_match_it()CVE-2023-39192Fix available6.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()CVE-2023-39189Fix available5.1 Medium
- Show moreLoading…