fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-9359
MEDIUM
KDE Okular <1.10.0 - Code Injection
Mar 24, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-10684
HIGH
Ansible Engine <2.7.17, 2.8.9, 2.9.6 - Privilege Escalation/Code In...
Mar 24, 2020
CVSS 7.9
EPSS 0.00
CVE-2020-6449
HIGH
Google Chrome < 80.0.3987.149 - Use-After-Free in Audio Component
Mar 23, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-6429
HIGH
Google Chrome < 80.0.3987.149 - Use-After-Free in Audio Component
Mar 23, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6428
HIGH
Google Chrome < 80.0.3987.149 - Use-After-Free in Audio Component
Mar 23, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6427
HIGH
Google Chrome < 80.0.3987.149 - Use-After-Free in Audio Component
Mar 23, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6426
MEDIUM
Google Chrome < 80.0.3987.149 - Remote Code Execution via V8 Heap Corruption
Mar 23, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-6425
MEDIUM
Google Chrome < 80.0.3987.149 - Site Isolation Bypass via Malicious Extension
Mar 23, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-6424
HIGH
Google Chrome <80.0.3987.149 - Use After Free
Mar 23, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-6422
HIGH
Google Chrome <80.0.3987.149 - Use After Free
Mar 23, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6420
HIGH
Google Chrome <80.0.3987.132 - CSRF
Mar 23, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-10803
MEDIUM
phpMyAdmin <4.9.5-5.0.2 - SQL Injection
Mar 22, 2020
CVSS 5.4
EPSS 0.02
CVE-2020-10802
HIGH
phpMyAdmin <4.9.5, 5.x <5.0.2 - SQL Injection
Mar 22, 2020
CVSS 8.0
EPSS 0.02
CVE-2020-10804
HIGH
phpMyAdmin <4.9.5-5.0.2 - SQL Injection
Mar 22, 2020
CVSS 8.0
EPSS 0.03
CVE-2020-8139
MEDIUM
Nextcloud Server <18.0.1-<16.0.9 - Info Disclosure
Mar 20, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-5267
MEDIUM
ActionView < 5.2.4.2 - Cross-Site Scripting via JavaScript Literal Escape Helpers
Mar 19, 2020
CVSS 4.0
EPSS 0.02
CVE-2020-10675
HIGH
jsonparser < 1.0.0 - Denial of Service via Delete Call
Mar 19, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-7919
HIGH
Go <1.12.16, <1.13.7 - Info Disclosure
Mar 16, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-6582
HIGH
Nagios NRPE 3.2.1 - Heap-Based Buffer Overflow via Incorrect Numeric Conversion
Mar 16, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-6581
HIGH
Nagios NRPE 3.2.1 - OS Command Injection via Insufficient Filtering
Mar 16, 2020
CVSS 7.3
EPSS 0.02
CVE-2020-1740
LOW
Ansible < 2.7.17 - Insecure Temporary File Handling in Vault Edit
Mar 16, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-1736
LOW
Ansible < 2.7.16 - Incorrect Permission Assignment via Atomic Move Primitive
Mar 16, 2020
CVSS 2.2
EPSS 0.00
CVE-2020-1735
MEDIUM
Ansible < 2.7.17 - Path Traversal via Fetch Module
Mar 16, 2020
CVSS 4.2
EPSS 0.00
CVE-2020-1753
MEDIUM
Ansible Engine <2.7.17, <2.8.11, <2.9.7 - Info Disclosure
Mar 16, 2020
CVSS 5.0
EPSS 0.01
CVE-2020-10531
HIGH
International Components for Unicode < 66.1 - Heap-Based Buffer Overflow via UnicodeString::doAppend() Integer Overflow
Mar 12, 2020
CVSS 8.8
EPSS 0.03
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters