Skip to contentFedoraproject vulnerabilities
Newest
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: Fix use-after-free bugs caused by sco_sock_timeoutCVE-2024-27398Public exploitFix available8.0 High
- google chrome, chromium, fedoraproject fedora +2 moreUse after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who...CVE-2024-4671In KEVFix available9.6 Critical
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote...CVE-2024-4559Fix available6.5 Medium
- google chrome, apple ipados, iphone os +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to...CVE-2024-4558Fix available9.6 Critical
- gnome glib, debian linux, fedoraproject fedora +7 more +9 moreAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a...CVE-2024-34397Fix available5.2 Medium
- pallets werkzeug, debian linux, fedoraproject fedora +2 moreWerkzeug's improper usage of a pathname and improper CSRF protection results in the remote command executionCVE-2024-34069Public exploitFix available7.5 High
- pallets jinja, fedoraproject fedora +1 moreJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterCVE-2024-34064Public exploitFix available5.4 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7...CVE-2024-34507Fix available7.4 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1...CVE-2024-34502Fix available9.8 Critical
- mediawiki, fedoraproject fedora +1 moreMediaWiki UnlinkedWikibase Cross-site Scripting vulnerabilityCVE-2024-34500Fix available6.1 Medium
- uriparser project uriparser, fedoraproject fedora +1 moreAn issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an...CVE-2024-34403Fix available5.9 Medium
- uriparser project uriparser, fedoraproject fedora +1 moreAn issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an...CVE-2024-34402Fix available8.6 High
- pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 moreXSS vulnerability in /settings/store API response json payload in pgAdmin 4CVE-2024-4216Fix available7.4 High
- pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 moreThe Multi Factor Authentication bypass vulnerability in pgAdmin 4CVE-2024-4215Fix available7.4 High
- rjbs email-mime, fedoraproject fedora, rjbs email mime +2 moreAn excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can...CVE-2024-4140Fix available7.5 High
- stb vorbis.c, stb vorbis project vorbis, fedoraproject fedora +1 more +3 moreA heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c...CVE-2023-472129.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to...CVE-2024-4368Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote...CVE-2024-4331Fix available8.8 High
- linux, linux kernel, fedoraproject fedora +2 morer8169: fix LED-related deadlock on module removalCVE-2024-27021Fix available7.8 High
- linux, linux kernel, fedoraproject fedora +2 morenetfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()CVE-2024-27019Fix available7.8 High
- linux, linux kernel, fedoraproject fedora +2 morenetfilter: br_netfilter: skip conntrack input hook for promisc packetsCVE-2024-27018Fix available8.2 High
- linux, linux kernel, fedoraproject fedora +2 morenetfilter: nft_set_pipapo: walk over current view on netlink dumpCVE-2024-27017Fix available7.8 High
- linux, linux kernel, fedoraproject fedora +2 morenetfilter: flowtable: validate pppoe headerCVE-2024-27016Fix available7.1 High
- linux, linux kernel, fedoraproject fedora +2 morenetfilter: flowtable: incorrect pppoe tupleCVE-2024-27015Fix available5.5 Medium
- linux, linux kernel, fedoraproject fedora +2 morenet/mlx5e: Prevent deadlock while disabling aRFSCVE-2024-27014Fix available5.5 Medium
- linux, linux kernel, fedoraproject fedora +4 more +6 moretun: limit printing rate when illegal packet received by tun devCVE-2024-27013Fix available5.5 Medium
- linux, linux kernel, fedoraproject fedora +2 morenetfilter: nf_tables: restore set elements when delete set failsCVE-2024-27012Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moredrm: nv04: Fix out of bounds accessCVE-2024-27008Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreclk: Get runtime PM before walking tree during disable_unusedCVE-2024-27004Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 morecomedi: vmk80xx: fix incomplete endpoint checkingCVE-2024-27001Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreserial: mxs-auart: add spinlock around changing cts stateCVE-2024-27000Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 morespeakup: Avoid crash on very long wordCVE-2024-26994Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreinit/main.c: Fix potential static_command_line memory overflowCVE-2024-26988Fix available7.8 High
- linux, linux kernel, fedoraproject fedora +2 moremm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabledCVE-2024-26987Fix available5.5 Medium
- linux, linux kernel, fedoraproject fedora +2 moredrm/amdkfd: Fix memory leak in create_process failureCVE-2024-26986Fix available5.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to...CVE-2024-4060Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to...CVE-2024-4059Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreType confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to...CVE-2024-4058Fix available8.8 High
- grassroot dicom dicom, fedoraproject fedora, grassroot platform +1 more +3 moreA heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of...CVE-2024-22391Fix available7.7 High
- grassroot dicom dicom, fedoraproject fedora, malaterre grassroots dicom +2 moreAn out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon...CVE-2024-22373Fix available8.1 High
- grassroot dicom dicom, fedoraproject fedora, malaterre grassroots dicom +2 moreAn out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu...CVE-2024-25569Fix available6.5 Medium
- freerdp, fedoraproject fedora +1 moreFreeRDP rdp_redirection_read_base64_wchar out of bound readCVE-2024-32662Fix available7.5 High
- freerdp, fedoraproject fedora +1 moreFreeRDP rdp_write_logon_info_v1 NULL accessCVE-2024-32661Fix available7.5 High
- freerdp, fedoraproject fedora +1 moreFreeRDP zgfx_decompress out of memory vulnerabilityCVE-2024-32660Fix available7.5 High
- freerdp, fedoraproject fedora +1 morefreerdp_image_copy out of bound readCVE-2024-32659Fix available9.8 Critical
- freerdp, fedoraproject fedora +1 moreFreeRDP ExtractRunLengthRegular* out of bound readCVE-2024-32658Fix available9.8 Critical
- element-hq synapse, fedoraproject fedora +1 moreSynapse's V2 state resolution weakness allows DoS from remote room membersCVE-2024-31208Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moredrm/amdgpu: validate the parameters of bo mapping operations more clearlyCVE-2024-26922Fix available7.8 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Out-Of-Bounds Read in interleaved_decompressCVE-2024-32460Fix available8.1 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Out-Of-Bounds Read in ncrush_decompressCVE-2024-32459Public exploitFix available9.8 Critical
- Show moreLoading…