fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-9497
MEDIUM
Apache Guacamole < 1.1.0 - Information Disclosure via RDP Static Virtual Channel Data
Jul 02, 2020
CVSS 4.4
EPSS 0.01
CVE-2020-5238
MEDIUM
GitHub Flavored Markdown < 0.29.0.gfm.1 - Denial of Service via Table Extension
Jul 01, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-14058
HIGH
Squid 3.1-3.5.27 and 4.x < 4.12 and 5.x < 5.0.3 - Denial of Service via TLS Certificate Validation
Jun 30, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-15049
CRITICAL
Squid < 4.12 and 5.x < 5.0.3 - HTTP Request Smuggling via Content-Length Header
Jun 30, 2020
CVSS 9.9
EPSS 0.06
CVE-2020-15396
HIGH
HylaFAX+ <7.0.2 - Privilege Escalation
Jun 30, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-15395
HIGH
MediaArea MediaInfo <20.03 - Buffer Overflow
Jun 30, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-4067
HIGH
coturn < 4.5.1.3 - Information Disclosure via Uninitialized STUN/TURN Response Buffer
Jun 29, 2020
CVSS 7.0
EPSS 0.02
CVE-2020-14002
MEDIUM
PuTTY 0.68-0.73 - Information Leak via Algorithm Negotiation
Jun 29, 2020
CVSS 5.9
EPSS 0.03
CVE-2020-10753
MEDIUM
Red Hat Ceph Storage RadosGW - HTTP Header Injection
Jun 26, 2020
CVSS 5.4
EPSS 0.02
CVE-2020-15306
MEDIUM
OpenEXR < 2.5.2 - Heap Buffer Overflow via Invalid ChunkCount Attribute
Jun 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-15305
MEDIUM
OpenEXR < 2.5.2 - Use-After-Free in DeepScanLineInputFile
Jun 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-15304
MEDIUM
OpenEXR < 2.5.2 - NULL Pointer Dereference in TiledInputFile Constructor
Jun 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-11538
HIGH
Pillow < 7.0.0 - Out-of-bounds Read in SGI Image File Parser
Jun 25, 2020
CVSS 8.1
EPSS 0.03
CVE-2020-10994
MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read via Crafted JP2 File
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-10379
HIGH
Pillow < 7.1.0 - Buffer Overflow in libImaging/TiffDecode.c
Jun 25, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-10378
MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read in PCX Image Decoder
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-10177
MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read in FliDecode
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-15005
LOW
MediaWiki <1.31.8-1.34.2 - Info Disclosure
Jun 24, 2020
CVSS 3.1
EPSS 0.01
CVE-2020-4033
LOW
FreeRDP < 2.1.2 - Out-of-bounds Read in RLEDECOMPRESS
Jun 22, 2020
CVSS 3.1
EPSS 0.02
CVE-2020-4032
LOW
FreeRDP < 2.1.2 - Integer Casting Vulnerability in update_recv_secondary_order
Jun 22, 2020
CVSS 3.1
EPSS 0.02
CVE-2020-4031
LOW
FreeRDP < 2.1.2 - Use-After-Free in gdi_SelectObject
Jun 22, 2020
CVSS 3.5
EPSS 0.02
CVE-2020-4030
LOW
FreeRDP < 2.1.2 - Integer Overflow in TrioParse
Jun 22, 2020
CVSS 3.5
EPSS 0.02
CVE-2020-11099
LOW
FreeRDP < 2.1.2 - Out-of-bounds Read in License Packet Handling
Jun 22, 2020
CVSS 3.5
EPSS 0.02
CVE-2020-11098
LOW
FreeRDP < 2.1.2 - Out-of-bounds Read in Glyph Cache
Jun 22, 2020
CVSS 3.5
EPSS 0.02
CVE-2020-11097
LOW
FreeRDP < 2.1.2 - Out-of-bounds Read in PRIMARY_DRAWING_ORDER_FIELD_BYTES
Jun 22, 2020
CVSS 3.5
EPSS 0.01
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters