fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-11867
LOW
Audacity <= 2.3.3 - Unprotected Temporary File Exposure via /var/tmp/audacity-$USER
Nov 30, 2020
CVSS 3.3
EPSS 0.00
CVE-2020-29130
MEDIUM
libslirp < 4.3.1 - Out-of-bounds Read in slirp.c
Nov 26, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-29129
MEDIUM
libslirp < 4.3.1 - Out-of-bounds Read in ncsi.c
Nov 26, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-25653
MEDIUM
spice-vdagent < 0.20.0 - Race Condition via Client Connection Handling
Nov 26, 2020
CVSS 6.3
EPSS 0.00
CVE-2020-25652
MEDIUM
spice-vdagent < 0.20.0 - Unauthenticated Denial of Service via UNIX Domain Socket
Nov 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25651
MEDIUM
spice-vdagent < 0.20.0 - Race Condition in File Transfer Protocol
Nov 26, 2020
CVSS 6.4
EPSS 0.00
CVE-2020-29074
HIGH
x11vnc 0.9.16 - Incorrect Permission Assignment for Shared Memory Segment
Nov 25, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-25650
MEDIUM
spice-vdagent < 0.20.0 - Denial of Service via File Transfer Handling
Nov 25, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-28928
MEDIUM
musl libc < 1.2.1 - Out-of-bounds Write in wcsnrtombs
Nov 24, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-26890
HIGH
Matrix Synapse < 1.20.0 - Denial of Service via Malformed m.room.member Event JSON Values
Nov 24, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-25660
HIGH
Cephx <15.2.6,14.2.14 - Privilege Escalation
Nov 23, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-25725
MEDIUM
Xpdf 4.02 - Use-After-Free in SplashOutputDev Type 3 Char Handling
Nov 21, 2020
CVSS 5.0
EPSS 0.01
CVE-2020-20740
HIGH
pdfresurrect < 0.20 - Heap-Based Buffer Overflow in pdf_get_version()
Nov 20, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-20739
MEDIUM
libvips < 8.8.2 - Information Disclosure via Uninitialized Variable in im_vips2dz
Nov 20, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-13671
HIGH
KEV
Drupal Core < 7.74, 8.8.11, 8.9.9, 9.0.8 - Unrestricted Upload of File with Dangerous Type
Nov 20, 2020
CVSS 8.8
EPSS 0.04
CVE-2020-4788
MEDIUM
IBM VIOS 3.1 and AIX 7.1-7.2 - Information Disclosure via L1 Cache
Nov 20, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-28924
HIGH
rclone < 1.53.3 - Insufficient Entropy in Password Generator
Nov 19, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-28949
HIGH
KEV
Archive_Tar <1.4.10 - Code Injection
Nov 19, 2020
CVSS 7.8
EPSS 0.85
CVE-2020-28948
HIGH
Archive_Tar < 1.4.11 - Deserialization of Untrusted Data via PHAR Case Bypass
Nov 19, 2020
CVSS 7.8
EPSS 0.47
CVE-2020-28941
MEDIUM
Linux Kernel < 5.9.9 - Use-After-Free in Speakup TTY Line Discipline
Nov 19, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25703
MEDIUM
Moodle 3.7.0-3.7.8, 3.8.0-3.8.5, 3.9.0-3.9.2 - Information Disclosure in Participants Table Download
Nov 19, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-25702
MEDIUM
Moodle 3.9-3.9.2 - Stored Cross-Site Scripting via Content Bank Item Rename
Nov 19, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-25701
MEDIUM
Moodle 3.5.0-3.5.14, 3.7.0-3.7.8, 3.8.0-3.8.5, 3.9.0-3.9.2 - Improper Access Control via Upload Course Tool
Nov 19, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-25700
MEDIUM
moodle 3.5.0-3.5.14, 3.7.0-3.7.8, 3.8.0-3.8.5, 3.9.0-3.9.2 - SQL Injection via Database Module Web Services
Nov 19, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-25699
HIGH
Moodle 3.5.0-3.5.14, 3.7.0-3.7.8, 3.8.0-3.8.5, 3.9.0-3.9.2 - Incorrect Authorization in Course Restore
Nov 19, 2020
CVSS 7.5
EPSS 0.02
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters