fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-8794
CRITICAL
OpenSMTPD OOB Read Local Privilege Escalation
Feb 25, 2020
CVSS 9.8
EPSS 0.89
CVE-2020-8793
MEDIUM
OpenSMTPD < 6.6.4 - Local Arbitrary File Read via Race Condition in makemap.c and smtpd.c
Feb 25, 2020
CVSS 4.7
EPSS 0.01
CVE-2020-1938
CRITICAL
KEVNUCLEI
Apache Tomcat 7.0.0-7.0.99, 8.5.0-8.5.50, 9.0.0.M1-9.0.0.30 - Remote Code Execution via AJP File Read and JSP Processing
Feb 24, 2020
CVSS 9.8
EPSS 0.99
CVE-2020-9369
HIGH
Sympa 6.2.38-6.2.52 - Denial of Service via Malformed Parameter Requests
Feb 24, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-9365
HIGH
NUCLEI
Pure-FTPd 1.0.49 - Out-of-Bounds Read in pure_strcmp
Feb 24, 2020
CVSS 7.5
EPSS 0.07
CVE-2020-8130
MEDIUM
Ruby Rake < 12.3.3 - Command Injection
Feb 24, 2020
CVSS 6.4
EPSS 0.01
CVE-2020-8813
HIGH
NUCLEI
Cacti 1.2.8 - Authenticated Remote Code Execution via Cookie Shell Metacharacter Injection
Feb 22, 2020
CVSS 8.8
EPSS 0.74
CVE-2020-9273
HIGH
ProFTPD 1.3.7 - Use-After-Free in Memory Pool via Data Transfer Channel Interruption
Feb 20, 2020
CVSS 8.8
EPSS 0.12
CVE-2020-9308
HIGH
libarchive 3.4.0-3.4.1 - Out-of-bounds Write in RAR5 Header Parsing
Feb 20, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6062
HIGH
coturn 4.5.1.1 - Denial of Service via Malformed HTTP POST Request
Feb 19, 2020
CVSS 7.5
EPSS 0.06
CVE-2020-6061
CRITICAL
coturn 4.5.1.1 - Heap Out-of-bounds Read via HTTP POST Request Parsing
Feb 19, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-8518
CRITICAL
Horde Groupware Webmail Edition <5.2.22 - Code Injection
Feb 17, 2020
CVSS 9.8
EPSS 0.72
CVE-2020-8955
CRITICAL
WeeChat < 2.7 - Buffer Overflow via Malformed IRC Message 324
Feb 12, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-8945
HIGH
gpgme < 0.1.1 - Use-After-Free in Proglottis Go Wrapper
Feb 12, 2020
CVSS 7.5
EPSS 0.05
CVE-2020-7957
MEDIUM
Dovecot 2.3.9-2.3.9.3 - Denial of Service in IMAP and LMTP Snippet Generation
Feb 12, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-7046
HIGH
Dovecot 2.3.9-2.3.9.3 - Unauthenticated Denial of Service via Truncated UTF-8 Data
Feb 12, 2020
CVSS 7.5
EPSS 0.51
CVE-2020-6416
HIGH
Google Chrome <80.0.3987.87 - Heap Corruption
Feb 11, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6415
HIGH
Google Chrome <80.0.3987.87 - Heap Corruption
Feb 11, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6408
MEDIUM
Google Chrome <80.0.3987.87 - Info Disclosure
Feb 11, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-6406
HIGH
Google Chrome <80.0.3987.87 - Use After Free
Feb 11, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6404
HIGH
Google Chrome <80.0.3987.87 - Heap Corruption
Feb 11, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6403
MEDIUM
Google Chrome < 80.0.3987.87 - Omnibox Spoofing via Crafted HTML Page
Feb 11, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-6402
HIGH
Google Chrome < 80.0.3987.87 - Arbitrary Code Execution via Malicious Extension
Feb 11, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-6400
MEDIUM
Google Chrome <80.0.3987.87 - Info Disclosure
Feb 11, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-6398
HIGH
Google Chrome <80.0.3987.87 - Heap Corruption
Feb 11, 2020
CVSS 8.8
EPSS 0.02
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters