fedoraproject

5,423 tracked vulnerabilities.

CVE-2020-6851 HIGH
OpenJPEG < 2.3.1 - Heap-Based Buffer Overflow in opj_t1_clbl_decode_processor
Jan 13, 2020
CVSS 7.5
EPSS 0.05
CVE-2020-6377 HIGH
Google Chrome <79.0.3945.117 - Use After Free
Jan 10, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-6750 MEDIUM
GNOME GLib 2.60.0-2.62.4 - Proxy Bypass via GSocketClient Address Mishandling
Jan 09, 2020
CVSS 5.9
EPSS 0.02
CVE-2020-5395 HIGH
FontForge 20190801 - Use-After-Free in SFD_GetFontMetaData
Jan 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-5313 HIGH
Pillow < 6.2.2 - Out-of-bounds Read in FLI Buffer Handling
Jan 03, 2020
CVSS 7.1
EPSS 0.03
CVE-2020-5312 CRITICAL
Pillow < 6.2.2 - Buffer Overflow in PCX P Mode Decoder
Jan 03, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-5311 CRITICAL
Pillow < 6.2.2 - Buffer Overflow in SGI Image Decoder
Jan 03, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-5310 HIGH
Pillow < 6.2.2 - Integer Overflow in TIFF Decoding
Jan 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-25058 HIGH
USBGuard <1.1.0 - Privilege Escalation
Feb 24, 2022
CVSS 7.8
EPSS 0.00
CVE-2019-25051 HIGH
GNU Aspell 0.60.8 - Buffer Overflow
Jul 20, 2021
CVSS 7.8
EPSS 0.01
CVE-2019-17567 MEDIUM
Apache HTTP Server 2.4.6-2.4.46 - HTTP Request Smuggling via mod_proxy_wstunnel
Jun 10, 2021
CVSS 5.3
EPSS 0.60
CVE-2019-12067 MEDIUM
QEMU - Denial of Service via NULL Pointer Dereference in ahci_commit_buf
Jun 02, 2021
CVSS 6.5
EPSS 0.00
CVE-2019-10196 CRITICAL
http-proxy-agent < 2.1.0 - Denial of Service and Data Exposure via Auth Parameter
Mar 19, 2021
CVSS 9.8
EPSS 0.01
CVE-2019-19005 HIGH
autotrace 0.31.1 - Double Free via Malformed Bitmap Image
Feb 11, 2021
CVSS 7.8
EPSS 0.01
CVE-2019-19004 LOW
autotrace 0.31.1 - Integer Overflow in input-bmp.c
Feb 11, 2021
CVSS 3.3
EPSS 0.01
CVE-2019-25013 MEDIUM
GNU C Library <2.32 - Buffer Overflow
Jan 04, 2021
CVSS 5.9
EPSS 0.04
CVE-2019-20919 MEDIUM
Perl DBI <1.643 - Memory Corruption
Sep 17, 2020
CVSS 4.7
EPSS 0.01
CVE-2019-20907 HIGH
Python < 3.5.10 - Denial of Service via Crafted TAR Archive
Jul 13, 2020
CVSS 7.5
EPSS 0.06
CVE-2019-13033 LOW
CISOfy Lynis 2.0.0-2.7.5 - Exposure of Sensitive Information via Process List
Jun 18, 2020
CVSS 3.3
EPSS 0.00
CVE-2019-18823 CRITICAL
HTCondor <8.8.6-8.9.4 - Privilege Escalation
Apr 27, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-20790 CRITICAL
OpenDMARC <= 1.3.2 and 1.4.x - Authentication Bypass via HELO/MAIL FROM Inconsistency
Apr 27, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-14905 MEDIUM
Ansible Engine < 2.7.16 - OS Command Injection via nxos_file_copy Module
Mar 31, 2020
CVSS 5.6
EPSS 0.01
CVE-2019-14855 HIGH
GnuPG < 2.2.18 - Certificate Signature Forgery via SHA-1 Collision
Mar 20, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-20485 MEDIUM
libvirt < 6.0.0 - Denial of Service via Guest Agent Query Monitor Job
Mar 19, 2020
CVSS 5.7
EPSS 0.01
CVE-2019-18183 CRITICAL
pacman < 5.2 - OS Command Injection via Crafted Delta File in apply_deltas()
Feb 24, 2020
CVSS 9.8
EPSS 0.04