fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-14575
MEDIUM
Netapp Active IQ Unified Manager < 8.0.20 - Denial of Service
Jul 15, 2020
CVSS 4.9
EPSS 0.02
CVE-2020-14573
LOW
Oracle Java SE <14.0.1 - Info Disclosure
Jul 15, 2020
CVSS 3.7
EPSS 0.03
CVE-2020-14568
MEDIUM
MySQL Server <= 8.0.20 - Authenticated Denial of Service in InnoDB
Jul 15, 2020
CVSS 4.9
EPSS 0.02
CVE-2020-14562
MEDIUM
Oracle JDK 11.0.7 and 14.0.1 - Unauthenticated Partial Denial of Service in ImageIO
Jul 15, 2020
CVSS 5.3
EPSS 0.05
CVE-2020-14559
MEDIUM
MySQL Server <8.0.20 - Info Disclosure
Jul 15, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-14556
MEDIUM
Oracle Java SE <14.0.1 - Privilege Escalation
Jul 15, 2020
CVSS 4.8
EPSS 0.03
CVE-2020-14553
MEDIUM
MySQL Server <= 5.7.30 and <= 8.0.20 - Authenticated Unauthorized Data Manipulation via Pluggable Auth
Jul 15, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-14550
MEDIUM
MySQL Client 5.6.0-5.6.48, 5.7.0-5.7.30, 8.0.0-8.0.20 - Denial of Service via C API
Jul 15, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-14547
MEDIUM
MySQL Server <= 5.7.30 and <= 8.0.20 - Authenticated Denial of Service in Optimizer
Jul 15, 2020
CVSS 4.9
EPSS 0.03
CVE-2020-14540
MEDIUM
MySQL Server <= 5.7.30 and <= 8.0.20 - Authenticated Denial of Service in Server: DML
Jul 15, 2020
CVSS 4.9
EPSS 0.02
CVE-2020-14539
MEDIUM
MySQL Server <= 5.6.48, <= 5.7.30, <= 8.0.20 - Denial of Service in Optimizer
Jul 15, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-13753
CRITICAL
WebKitGTK and WPE WebKit < 2.28.3 - Sandbox Escape via CLONE_NEWUSER and TIOCSTI
Jul 14, 2020
CVSS 10.0
EPSS 0.03
CVE-2020-12402
MEDIUM
Firefox < 78.0 - Side-Channel Information Disclosure during RSA Key Generation
Jul 09, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-15095
MEDIUM
npm < 6.14.6 - Information Exposure via Log File
Jul 07, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-10745
HIGH
Samba < 4.10.17, < 4.11.11, < 4.12.4 - Denial of Service via NetBios over TCP/IP
Jul 07, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-10730
MEDIUM
Samba <4.10.17-4.12.4 - Memory Corruption
Jul 07, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-15567
HIGH
Xen < 4.13.1 - Race Condition via Non-Atomic EPT PTE Modification
Jul 07, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-15565
HIGH
Xen 3.2.0-4.13.0 - Denial of Service via Insufficient Cache Write-Back
Jul 07, 2020
CVSS 8.8
EPSS 0.00
CVE-2020-15564
MEDIUM
Xen < 4.13.1 - Denial of Service via Misaligned VCPUOP_register_vcpu_info Hypercall
Jul 07, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-15563
MEDIUM
Xen 4.8.0-4.13.0 - Denial of Service via Dirty Video RAM Tracking
Jul 07, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-10760
MEDIUM
Samba <4.10.17-4.12.4 - Use After Free
Jul 06, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-14303
HIGH
Samba < 4.10.17 - Denial of Service via Empty UDP Packet
Jul 06, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-8185
MEDIUM
Rails 6.0.0-6.0.3.1 - Unauthenticated Denial of Service via Pending Migration Execution
Jul 02, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-15503
HIGH
LibRaw < 0.20-RC1 - Heap-Based Buffer Overflow via Unvalidated Thumbnail Length
Jul 02, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-9498
MEDIUM
Apache Guacamole < 1.1.0 - Memory Corruption via RDP Static Virtual Channel
Jul 02, 2020
CVSS 6.7
EPSS 0.01
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters