fedoraproject

5,423 tracked vulnerabilities.

CVE-2020-25698 HIGH
Moodle 3.5.0-3.5.14, 3.7.0-3.7.8, 3.8.0-3.8.5, 3.9.0-3.9.2 - Improper Access Control in Course Enrollment Restoration
Nov 19, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-8277 HIGH
Node.js <15.2.1, <14.15.1, <12.19.1 - DoS
Nov 19, 2020
CVSS 7.5
EPSS 0.54
CVE-2020-28366 HIGH
GO < 1.14.12 - Code Injection
Nov 18, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-28362 HIGH
GO < 1.14.12 - Improper Certificate Validation
Nov 18, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-8698 MEDIUM
Intel(R) Processors - Info Disclosure
Nov 12, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-8696 MEDIUM
Intel(R) Processors - Info Disclosure
Nov 12, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-8695 MEDIUM
Intel(R) Processors - Info Disclosure
Nov 12, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25658 HIGH
python-rsa 2.1-4.6 - Bleichenbacher Timing Attack via RSA Decryption API
Nov 12, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-28368 MEDIUM
Xen < 4.14.0 - Unauthenticated Sensitive Information Disclosure via Power Monitoring Side-Channel
Nov 10, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-0452 CRITICAL
Android 8.0-11 - Integer Overflow to Remote Code Execution in EXIF Entry Processing
Nov 10, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-28196 HIGH
MIT Kerberos <1.17.2, <1.18.x-1.18.3 - RCE
Nov 06, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-26892 CRITICAL
NATS nats-server <2.1.9 - Info Disclosure
Nov 06, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-26521 HIGH
nats-server < 2.1.9 - Denial of Service via JWT Library Nil Dereference
Nov 06, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-16846 CRITICAL KEVNUCLEI
SaltStack Salt REST API Arbitrary Command Execution
Nov 06, 2020
CVSS 9.8
EPSS 1.00
CVE-2020-28242 MEDIUM
Asterisk Open Source <13.37.1,16.14.1,17.8.1,18.0.1 - DoS
Nov 06, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-28241 MEDIUM
libmaxminddb < 1.4.3 - Heap-Based Buffer Over-Read in dump_entry_data_list
Nov 06, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-28049 MEDIUM
SDDM < 0.19.0 - Unauthenticated X Server Access via Race Condition
Nov 04, 2020
CVSS 6.3
EPSS 0.00
CVE-2020-8037 HIGH
tcpdump 4.9.3 - Denial of Service via PPP Decapsulator Memory Allocation
Nov 04, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-6557 MEDIUM
Google Chrome < 86.0.4240.75 - Domain Spoofing via Crafted HTML Page
Nov 03, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-16009 HIGH KEV
CefSharp < 86.0.241 - Remote Code Execution via V8 Type Confusion
Nov 03, 2020
CVSS 8.8
EPSS 0.49
CVE-2020-16008 HIGH
Google Chrome < 86.0.4240.183 - Remote Code Execution via WebRTC Stack Buffer Overflow
Nov 03, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-16006 HIGH
Google Chrome < 86.0.4240.183 - Remote Code Execution via V8 Heap Corruption
Nov 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-16005 HIGH
Google Chrome < 86.0.4240.183 - Remote Heap Corruption via ANGLE Policy Enforcement
Nov 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-16004 HIGH
Google Chrome < 86.0.4240.183 - Use-After-Free in User Interface
Nov 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-16003 HIGH
Google Chrome < 86.0.4240.111 - Use-After-Free in Printing
Nov 03, 2020
CVSS 8.8
EPSS 0.01