Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...CVE-2024-2174Fix availableEPSS 12.7%8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...CVE-2024-2173Fix availableEPSS 13.7%8.8 High
- intel inet wireless daemon, fedoraproject fedora +1 morep2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of...CVE-2024-28084Fix available7.5 High
- qpdf project qpdf, fedoraproject fedora +1 moreHeap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via...CVE-2024-24246Fix available5.5 Medium
- clojure, fedoraproject fedora +1 moreReading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of serviceCVE-2024-22871Fix available7.5 High
- lsegal yard, debian linux, fedoraproject fedora +2 moreYARD's default template vulnerable to Cross-site Scripting in generated frames.htmlCVE-2024-27285Fix available5.4 Medium
- google chrome, v8, fedoraproject fedora +2 moreType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...CVE-2024-1939Public exploitFix available8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...CVE-2024-1938Fix available8.8 High
- liblas, fedoraproject fedora +1 morelibLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.CVE-2024-275077.5 High
- oisf libhtp, fedoraproject fedora +1 moreLibHTP unbounded folded header handling leads to denial serviceCVE-2024-23837Fix available7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata http2: header handling evasionCVE-2024-24568Fix available5.3 Medium
- oisf suricata, fedoraproject fedora +1 moreSuricata http: heap use after free with http.request_header and http.response_header keywordsCVE-2024-23839Fix available7.1 High
- oisf suricata, fedoraproject fedora +1 morecrafted traffic can cause denial of serviceCVE-2024-23836Fix available7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata's pgsql: memory exhaustion use on record parsingCVE-2024-23835Fix available7.5 High
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after openingCVE-2024-16227.5 High
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted archives or...CVE-2024-25082Public exploitFix available6.5 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted filenames.CVE-2024-25081Public exploitFix available4.2 Medium
- apostrophecms sanitize-html, fedoraproject fedora +1 moresanitize-html Information Exposure vulnerabilityCVE-2024-21501Fix available5.3 Medium
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Out-of-bounds Read vulnerabilityCVE-2024-27319Fix available4.4 Medium
- linuxfoundation onnx, fedoraproject fedora +1 moreOnnx Directory Traversal vulnerabilityCVE-2024-27318Fix available7.5 High
- c-ares, fedoraproject fedora +1 morec-ares out of bounds read in ares__read_line()CVE-2024-25629Fix available4.4 Medium
- apple macos, safari, ios and ipados +5 more +7 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...CVE-2023-42843Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a...CVE-2024-1676Fix availableEPSS 17.9%5.4 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a...CVE-2024-1675Fix availableEPSS 10.5%8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a...CVE-2024-1674Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker...CVE-2024-1673Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57...CVE-2024-1672Fix available5.4 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to...CVE-2024-1670Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote...CVE-2024-1669Fix available8.8 High
- wireshark, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker...CVE-2024-24479Fix availableDisputed7.5 High
- wireshark, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker...CVE-2024-24476Fix availableDisputed7.5 High
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The...CVE-2024-23305Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig...CVE-2024-22097Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The...CVE-2024-23809Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig...CVE-2024-21795Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...CVE-2024-23313Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...CVE-2024-21812Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreAn out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig...CVE-2024-23606Fix available9.8 Critical
- libbiosig project libbiosig, fedoraproject fedora +1 moreA use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project...CVE-2024-23310Fix available9.8 Critical
- agronholm cbor2, fedoraproject fedora +1 moreCBOR2 decoder has potential buffer overflowCVE-2024-26134Fix available7.5 High
- fedoraproject fedora, moodle +1 moreMsa-24-0006: idor on dashboard comments blockCVE-2024-25983Fix available3.5 Low
- fedoraproject fedora, moodle +1 moreMsa-24-0005: csrf risk in language import utilityCVE-2024-25982Fix available4.3 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0004: forum export did not respect activity group settingsCVE-2024-25981Fix available4.3 Medium
- moodle h5p, fedoraproject fedora, moodle +2 moreMsa-24-0003: h5p attempts report did not respect activity group settingsCVE-2024-25980Fix available4.3 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0002: forum search accepted random parameters in its urlCVE-2024-25979Fix available5.3 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0001: denial of service risk in file picker unzip functionalityCVE-2024-25978Fix available7.5 High
- pgjdbc, postgresql jdbc driver, fedoraproject fedora +2 morepgjdbc SQL Injection via line comment generationCVE-2024-1597Fix available10.0 Critical
- videolan dav1d, apple ipados, iphone os +4 more +6 moreInteger overflow in VideoLAN dav1dCVE-2024-1580Fix available5.9 Medium
- debian linux, fedoraproject fedora, redhat enterprise linux +1 more +3 moreThe implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...CVE-2023-52160Public exploitFix available6.5 Medium
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationCVE-2024-1488Fix available8.0 High
- Show moreLoading…