Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6509Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6508Fix available8.8 High
- apple ipados, iphone os, macos +4 more +6 moreBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...CVE-2023-45866Public exploitFix available6.3 Medium
- apple ipados, macos, safari +6 more +8 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...CVE-2023-42917In KEVFix available8.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17...CVE-2023-42916In KEVFix availableEPSS 17.8%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6351Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6350Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...CVE-2023-6345In KEVFix availableEPSS 16.5%9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...CVE-2023-6348Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6347Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6346Fix available8.8 High
- perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 morePerl: write past buffer end via illegal user-defined unicode propertyCVE-2023-47038Fix available7.0 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: out-of-memory in tiffopen via a craft fileCVE-2023-6277Fix available6.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.cCVE-2023-5972Fix available7.0 High
- vim, fedoraproject fedora, neovim +1 more +3 moreVim has heap-use-after-free at /src/charset.c:1770:12 in skipwhiteCVE-2023-48706Fix available3.6 Low
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: nvme: memory corruption via unprivileged user passthroughCVE-2023-6238Fix available6.7 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- vim, fedoraproject fedora +1 moreUse-After-Free in win_close() in vimCVE-2023-48231Fix available3.9 Low
- vim, fedoraproject fedora +1 moreFloating point Exception in adjust_plines_for_skipcol() in vimCVE-2023-48232Fix available3.9 Low
- vim, fedoraproject fedora +1 moreoverflow with count for :s command in vimCVE-2023-48233Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in nv_z_get_count in vimCVE-2023-48234Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in ex address parsing in vimCVE-2023-48235Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in get_number in vimCVE-2023-48236Fix available2.8 Low
- vim, fedoraproject fedora +1 moreoverflow in shift_line in vimCVE-2023-48237Fix available2.8 Low
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker...CVE-2023-6112Fix availableEPSS 24.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote...CVE-2023-5997Fix available8.8 High
- kubernetes, fedoraproject fedora, kubernetes kubelet +2 moreKubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalationCVE-2023-5528Fix available7.2 High
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUse after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory...CVE-2023-46850Fix available9.8 Critical
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUsing the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows...CVE-2023-46849Fix available7.5 High
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read printing error messagesCVE-2023-40546Fix available6.2 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: duplicating a bigbluebutton activity assigns the same meeting idCVE-2023-5543Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: forum summary report shows students from other groups when in separate groups modeCVE-2023-5551Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: rce due to lfi risk in some misconfigured shared hosting environmentsCVE-2023-5550Fix available6.5 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: insufficient capability checks when updating the parent of a course categoryCVE-2023-5549Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: cache poisoning risk with endpoint revision numbersCVE-2023-5548Fix available3.3 Low
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: xss risk when previewing data in course upload toolCVE-2023-5547Fix available3.3 Low
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: stored xss in quiz grading report via user id numberCVE-2023-5546Public exploitFix available4.3 Medium
- moodle h5p, moodle, fedoraproject extra packages for enterprise linux +1 more +3 moreMoodle: auto-populated h5p author name causes a potential information leakCVE-2023-5545Fix available3.3 Low
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: stored xss and potential idor risk in wiki commentsCVE-2023-5544Fix available6.5 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: students can view other users in "only see own membership" groupsCVE-2023-5542Fix available3.3 Low
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: authenticated remote code execution risk in imscpCVE-2023-5540Fix available4.7 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: authenticated remote code execution risk in lessonCVE-2023-5539Fix available4.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()CVE-2023-39198Fix available7.5 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()CVE-2023-39197Fix available4.0 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to...CVE-2023-5996Fix available8.8 High
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: out-of-bounds read in myeid driver handling encryption using symmetric keysCVE-2023-4535Fix available4.5 Medium
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content...CVE-2023-47272Fix available6.1 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in parse_lease_state()CVE-2023-1194Fix available7.1 High
- python pillow, fedoraproject fedora +1 morePillow Denial of Service vulnerabilityCVE-2023-44271Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5859Fix available4.3 Medium
- Show moreLoading…