fedoraproject

5,423 tracked vulnerabilities.

CVE-2020-1739 LOW
Ansible <2.7.16, <2.8.8, <2.9.5 - Info Disclosure
Mar 12, 2020
CVSS 3.9
EPSS 0.00
CVE-2020-10109 CRITICAL
Twisted Web < 19.10.0 - HTTP Request Smuggling via Content-Length and Chunked Encoding
Mar 12, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-10108 CRITICAL
Twisted Web < 19.10.0 - HTTP Request Smuggling via Dual Content-Length Headers
Mar 12, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-1733 MEDIUM
Ansible Engine <2.7.17, <2.8.9, <2.9.6 - Privilege Escalation
Mar 11, 2020
CVSS 5.0
EPSS 0.00
CVE-2020-9440 MEDIUM
CKEditor WSC Plugin <= 5.5.7.5 - Cross-Site Scripting via IFRAME Element Injection
Mar 10, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-10232 CRITICAL
The Sleuth Kit < 4.8.0 - Stack Buffer Overflow in YAFFS File Timestamp Parsing
Mar 09, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-9281 MEDIUM
CKEditor 4.0-4.13 - Cross-Site Scripting via Protected Comment Injection
Mar 07, 2020
CVSS 6.1
EPSS 0.04
CVE-2020-10188 CRITICAL
Juniper Junos - Remote Code Execution via Buffer Overflow in telnetd utility.c
Mar 06, 2020
CVSS 9.8
EPSS 0.75
CVE-2020-10174 HIGH
Timeshift < 20.03 - Unauthenticated Race Condition via Predictable Temporary Directory
Mar 05, 2020
CVSS 7.0
EPSS 0.00
CVE-2020-9402 HIGH NUCLEI
Django 1.11-1.11.28, 2.2-2.2.10, 3.0-3.0.3 - SQL Injection via GIS Tolerance Parameter
Mar 05, 2020
CVSS 8.8
EPSS 0.23
CVE-2020-10029 MEDIUM
glibc < 2.32 - Out-of-bounds Write in Long Double Range Reduction
Mar 04, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-10018 CRITICAL
WebKitGTK and WPE WebKit < 2.28.0 - Use-After-Free
Mar 02, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-5247 MEDIUM
Puma < 3.12.3 - HTTP Response Splitting via Header Injection
Feb 28, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-9431 HIGH
Wireshark 2.6.0-2.6.14, 3.0.0-3.0.8, 3.2.0-3.2.1 - Use-After-Free in LTE RRC Dissector
Feb 27, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-9430 HIGH
Wireshark 2.6.0-2.6.14, 3.0.0-3.0.8, 3.2.0-3.2.1 - Denial of Service in WiMax DLMAP Dissector
Feb 27, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-9428 HIGH
Wireshark 2.6.0-2.6.14, 3.0.0-3.0.8, 3.2.0-3.2.1 - Denial of Service in EAP Dissector
Feb 27, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-6418 HIGH KEV
Google Chrome <80.0.3987.122 - Heap Corruption
Feb 27, 2020
CVSS 8.8
EPSS 0.79
CVE-2020-6386 HIGH
Google Chrome <80.0.3987.116 - Use After Free
Feb 27, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6384 HIGH
Google Chrome <80.0.3987.116 - Use After Free
Feb 27, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6383 HIGH
Google Chrome <80.0.3987.116 - Heap Corruption
Feb 27, 2020
CVSS 8.8
EPSS 0.06
CVE-2020-7043 CRITICAL
openfortivpn < 1.12.0 - Improper Certificate Validation via Hostname Comparison
Feb 27, 2020
CVSS 9.1
EPSS 0.02
CVE-2020-7042 MEDIUM
openfortivpn < 1.12.0 - Improper Certificate Validation
Feb 27, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-7041 MEDIUM
openfortivpn < 1.12.0 - Improper Certificate Validation
Feb 27, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-9274 HIGH NUCLEI
Pure-FTPd < 1.0.50 - Use-After-Free in diraliases Linked List
Feb 26, 2020
CVSS 7.5
EPSS 0.06
CVE-2020-9391 MEDIUM
Linux Kernel 5.4-5.5.6 - Out-of-bounds Write via brk System Call
Feb 25, 2020
CVSS 5.5
EPSS 0.00
Products
fedora 5,353 extra_packages_for_enterprise_linux 76 389_directory_server 39 sssd 19 fedora_core 8 389_administration_server 1 anaconda 1 arm_installer 1 commons 1 coolkey 1 crypto-utils 1 fedmsg 1 fedora_linux_kernel 1 python-fedora 1 sectool 1 selinux-policy 1 spin-kickstarts 1 supybot-fedora 1 unbound 1
Quick Filters
Critical CVEs With Exploits In CISA KEV