fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-15972
HIGH
Google Chrome < 86.0.4240.75 - Use-After-Free in Audio Component
Nov 03, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-15971
HIGH
Google Chrome < 86.0.4240.75 - Use-After-Free in Printing
Nov 03, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-15970
HIGH
Google Chrome < 86.0.4240.75 - Use-After-Free in NFC
Nov 03, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-15969
HIGH
Google Chrome < 86.0.4240.75 - Use-After-Free in WebRTC
Nov 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-15968
HIGH
Google Chrome < 86.0.4240.75 - Use-After-Free in Blink via Crafted HTML Page
Nov 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-15967
HIGH
Google Chrome < 86.0.4240.75 - Use-After-Free in Payments
Nov 03, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-28038
MEDIUM
WordPress < 5.5.2 - Stored Cross-Site Scripting via Post Slugs
Nov 02, 2020
CVSS 6.1
EPSS 0.03
CVE-2020-28037
CRITICAL
WordPress < 5.5.2 - Remote Code Execution via Improper Installation Check
Nov 02, 2020
CVSS 9.8
EPSS 0.07
CVE-2020-28036
CRITICAL
WordPress < 5.5.2 - Missing Authorization via XML-RPC Comment
Nov 02, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-28035
CRITICAL
WordPress <5.5.2 - Privilege Escalation
Nov 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-28034
MEDIUM
WordPress < 5.5.2 - Cross-Site Scripting via Global Variables
Nov 02, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-28033
HIGH
WordPress < 5.5.2 - Unauthenticated Spam Embed via Disabled Site Bypass
Nov 02, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-28032
CRITICAL
WordPress < 5.5.2 - Deserialization of Untrusted Data in FilteredIterator
Nov 02, 2020
CVSS 9.8
EPSS 0.16
CVE-2020-28030
HIGH
Wireshark 3.2.0-3.2.7 - Denial of Service in GQUIC Dissector
Nov 02, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-14323
MEDIUM
Samba < 4.11.15 - Denial of Service via Winbind Null Pointer Dereference
Oct 29, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-15238
HIGH
Blueman < 2.1.4 - Command Injection via DhcpClient D-Bus Method
Oct 27, 2020
CVSS 7.1
EPSS 0.05
CVE-2020-27675
MEDIUM
Linux Kernel < 5.9.1 - Use-After-Free in Xen Event Channel Handling
Oct 22, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-27674
MEDIUM
Xen < 4.14.0 - Unauthenticated Out-of-bounds Write via TLB Invalidation Mishandling
Oct 22, 2020
CVSS 5.3
EPSS 0.00
CVE-2020-27672
HIGH
Xen 3.2.0-4.14.x - Use-After-Free via Superpage Race Condition
Oct 22, 2020
CVSS 7.0
EPSS 0.00
CVE-2020-27671
HIGH
Xen 4.2.0-4.14.x - Denial of Service and Privilege Escalation via IOMMU TLB Flush Mishandling
Oct 22, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-27670
HIGH
Xen <4.14.x - DoS/Privilege Escalation
Oct 22, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-27638
HIGH
fastd < 21.0 - Denial of Service via Invalid Packet Type Code
Oct 22, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-27619
CRITICAL
Python 3.0.0-3.9.0 - Remote Code Execution via CJK Codec Test HTTP Content
Oct 22, 2020
CVSS 9.8
EPSS 0.08
CVE-2020-14812
MEDIUM
MySQL Server <= 5.6.49, 5.7.31, 8.0.21 - Authenticated Denial of Service in Locking Component
Oct 21, 2020
CVSS 4.9
EPSS 0.03
CVE-2020-14794
MEDIUM
MySQL Server <= 8.0.21 - Authenticated Denial of Service in Optimizer
Oct 21, 2020
CVSS 4.9
EPSS 0.02
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters