fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-11096
LOW
FreeRDP < 2.1.2 - Out-of-bounds Read in Bitmap Cache Update
Jun 22, 2020
CVSS 3.5
EPSS 0.02
CVE-2020-11095
LOW
FreeRDP < 2.1.2 - Out-of-bounds Read in PRIMARY_DRAWING_ORDER_FIELD_BYTES
Jun 22, 2020
CVSS 3.5
EPSS 0.01
CVE-2020-14954
MEDIUM
Mutt <1.14.4-NeoMutt <2020-06-19 - Response Injection
Jun 21, 2020
CVSS 5.9
EPSS 0.02
CVE-2020-14929
HIGH
Alpine < 2.23 - Insecure Connection Handling via TLS Downgrade
Jun 19, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-13882
MEDIUM
CISOfy Lynis < 3.0.0 - Time-of-check Time-of-use Race Condition in Log and Report File Permission Check
Jun 18, 2020
CVSS 4.2
EPSS 0.00
CVE-2020-14422
MEDIUM
Python < 3.5.10 - Denial of Service via IPv4Interface and IPv6Interface Hash Calculation
Jun 18, 2020
CVSS 5.9
EPSS 0.12
CVE-2020-3350
MEDIUM
Cisco AMP for Endpoints/Clam AntiVirus - Privilege Escalation
Jun 18, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-8619
MEDIUM
ISC BIND 9.11.14-9.11.19, 9.14.9-9.14.12, 9.16.0-9.16.3 - Denial of Service via Empty Non-Terminal Entry
Jun 17, 2020
CVSS 4.9
EPSS 0.02
CVE-2020-14040
HIGH
golang/text < 0.3.3 - Denial of Service via UTF-16 Decoder Infinite Loop
Jun 17, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-14295
HIGH
Cacti 1.2.12 - Authenticated SQL Injection via color.php filter Parameter
Jun 17, 2020
CVSS 7.2
EPSS 0.86
CVE-2020-14148
HIGH
ngIRCd < 26~rc2 - Out-of-bounds Read in Server-Server Protocol
Jun 15, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-13999
MEDIUM
libemf < 1.0.12 - Integer Overflow and Denial of Service via ScaleViewPortExtEx
Jun 15, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-0543
MEDIUM
Intel Celeron Processors - Information Disclosure via Incomplete Special Register Cleanup
Jun 15, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-4050
LOW
WordPress 3.7-5.4.1 - Arbitrary User Meta Field Injection via set-screen-option Filter Misuse
Jun 12, 2020
CVSS 3.5
EPSS 0.02
CVE-2020-4049
LOW
WordPress 3.7-5.4.1 - Stored Cross-Site Scripting via Theme Folder Name
Jun 12, 2020
CVSS 2.4
EPSS 0.03
CVE-2020-4048
MEDIUM
WordPress 3.7-3.7.33 - Open Redirect via URL Sanitization Issue
Jun 12, 2020
CVSS 5.7
EPSS 0.02
CVE-2020-4047
MEDIUM
WordPress 3.7-5.4.1 - Authenticated Stored Cross-Site Scripting via Media File Attachment
Jun 12, 2020
CVSS 6.8
EPSS 0.03
CVE-2020-4046
MEDIUM
WordPress 3.7-5.4.1 - Authenticated Stored Cross-Site Scripting via Embed Block
Jun 12, 2020
CVSS 5.4
EPSS 0.02
CVE-2020-0198
HIGH
Android - Integer Overflow in exif_data_load_data_content
Jun 11, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-0181
HIGH
Android - Denial of Service via Integer Overflow in exif_data_load_data_thumbnail
Jun 11, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-2026
HIGH
Kata Containers runtime < 1.9.1 - Unauthenticated Arbitrary File Write via Filesystem Mount
Jun 10, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-13977
MEDIUM
Nagios 4.4.5 - Privilege Escalation
Jun 09, 2020
CVSS 4.9
EPSS 0.03
CVE-2020-10757
HIGH
Linux Kernel >4.5-rc1 - Privilege Escalation
Jun 09, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-13965
MEDIUM
KEV
Roundcube Webmail < 1.3.12 and 1.4.x < 1.4.5 - Stored Cross-Site Scripting via XML Attachment Preview
Jun 09, 2020
CVSS 6.1
EPSS 0.77
CVE-2020-13964
MEDIUM
Roundcube Webmail < 1.3.12 and 1.4.x < 1.4.5 - Cross-Site Scripting via Username Template Object
Jun 09, 2020
CVSS 6.1
EPSS 0.01
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters