fedoraproject

5,423 tracked vulnerabilities.

CVE-2020-15963 CRITICAL
Google Chrome <85.0.4183.121 - Privilege Escalation
Sep 21, 2020
CVSS 9.6
EPSS 0.01
CVE-2020-15962 HIGH
Google Chrome < 85.0.4183.121 - Out of Bounds Memory Access via Serial Policy Validation
Sep 21, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-15961 CRITICAL
Google Chrome <85.0.4183.121 - Sandbox Escape
Sep 21, 2020
CVSS 9.6
EPSS 0.01
CVE-2020-15960 HIGH
Google Chrome < 85.0.4183.121 - Heap Buffer Overflow via Crafted HTML Page
Sep 21, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-15959 MEDIUM
Google Chrome <85.0.4183.102 - Info Disclosure
Sep 21, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-8252 HIGH
libuv <10.22.1-14.9.0 - Buffer Overflow
Sep 18, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-8251 HIGH
Node.js < 14.11.0 - Denial of Service via Delayed HTTP Request Submission
Sep 18, 2020
CVSS 7.5
EPSS 0.09
CVE-2020-8201 HIGH
Node.js < 12.18.4-14.11 - Open Redirect
Sep 18, 2020
CVSS 7.4
EPSS 0.05
CVE-2020-14382 HIGH
cryptsetup - Out-of-bounds Write in LUKS2 Segments Validation
Sep 16, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-14393 HIGH
perl-DBI < 1.643 - Stack-based Buffer Overflow in DBI.xs
Sep 16, 2020
CVSS 7.1
EPSS 0.01
CVE-2020-14392 MEDIUM
Perl-DBI < 1.643 - Memory Corruption
Sep 16, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-14386 MEDIUM
Linux Kernel < 4.9.239 - Privilege Escalation via Memory Corruption
Sep 16, 2020
CVSS 6.7
EPSS 0.01
CVE-2020-8927 MEDIUM
Brotli < 1.0.8 - Denial of Service via One-Shot Decompression Buffer Overflow
Sep 15, 2020
CVSS 5.3
EPSS 0.03
CVE-2020-14363 HIGH
libX11 < 1.6.12 - Integer Overflow to Double-Free
Sep 11, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-1045 HIGH
Microsoft ASP.NET Core - Auth Bypass
Sep 11, 2020
CVSS 7.5
EPSS 0.06
CVE-2020-15169 MEDIUM
Action View < 5.2.4.4 - Cross-Site Scripting in Translation Helpers
Sep 11, 2020
CVSS 5.4
EPSS 0.02
CVE-2020-15166 HIGH
libzmq < 4.3.3 - Denial of Service via TCP Transport Endpoint
Sep 11, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-25219 HIGH
libproxy 0.4.0-0.4.15 - Denial of Service via Infinite HTTP Response Stream
Sep 09, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-25211 MEDIUM
Linux Kernel < 5.8.7 - Buffer Overflow in ctnetlink_parse_tuple_filter
Sep 09, 2020
CVSS 6.0
EPSS 0.01
CVE-2020-14342 MEDIUM
cifs-utils 5.6-6.10 - OS Command Injection via Samba Password Request
Sep 09, 2020
CVSS 4.4
EPSS 0.01
CVE-2020-24659 HIGH
GnuTLS <3.6.15 - NULL Pointer Dereference
Sep 04, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-24977 MEDIUM
libxml2 2.9.10 - Out-of-bounds Read in xmlEncodeEntitiesInternal
Sep 04, 2020
CVSS 6.5
EPSS 0.04
CVE-2020-15094 HIGH
Symfony <4.4.13, 5.1.5 - Info Disclosure
Sep 02, 2020
CVSS 8.0
EPSS 0.03
CVE-2020-24654 LOW
KDE Ark < 20.08.1 - Arbitrary File Write via Symlink in TAR Archive
Sep 02, 2020
CVSS 3.3
EPSS 0.01
CVE-2020-24553 MEDIUM
Go <1.14.8, <1.15.1 - XSS
Sep 02, 2020
CVSS 6.1
EPSS 0.04
Products
fedora 5,353 extra_packages_for_enterprise_linux 76 389_directory_server 39 sssd 19 fedora_core 8 389_administration_server 1 anaconda 1 arm_installer 1 commons 1 coolkey 1 crypto-utils 1 fedmsg 1 fedora_linux_kernel 1 python-fedora 1 sectool 1 selinux-policy 1 spin-kickstarts 1 supybot-fedora 1 unbound 1
Quick Filters
Critical CVEs With Exploits In CISA KEV