fedoraproject
5,423 tracked vulnerabilities.
CVE-2019-18182
CRITICAL
pacman < 5.2 - OS Command Injection via XferCommand Database Retrieval
Feb 24, 2020
CVSS 9.8
EPSS 0.04
CVE-2019-20044
HIGH
zsh < 5.8 - Privilege Escalation via Module Path Manipulation
Feb 24, 2020
CVSS 7.8
EPSS 0.00
CVE-2019-20479
MEDIUM
mod_auth_openidc < 2.4.1 - Open Redirect via Slash and Backslash URL Prefix
Feb 20, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-20477
CRITICAL
PyYAML 5.1-5.1.2 - Deserialization of Untrusted Data via Insufficient Class Restrictions
Feb 19, 2020
CVSS 9.8
EPSS 0.05
CVE-2019-20454
HIGH
PCRE2 10.31-10.33 - Out-of-bounds Read via \X Pattern in Non-UTF Mode
Feb 14, 2020
CVSS 7.5
EPSS 0.02
CVE-2019-15605
CRITICAL
Node.js 10.0.0-10.18.9, 13.0.0-13.7.0 - HTTP Request Smuggling via Malformed Transfer-Encoding
Feb 07, 2020
CVSS 9.8
EPSS 0.57
CVE-2019-12528
HIGH
Squid < 4.10 - Information Disclosure via Crafted FTP Server Response
Feb 04, 2020
CVSS 7.5
EPSS 0.10
CVE-2019-20446
MEDIUM
librsvg < 2.46.2 - Denial of Service via Nested SVG Pattern Elements
Feb 02, 2020
CVSS 6.5
EPSS 0.02
CVE-2019-20445
CRITICAL
Netty < 4.1.44 - HTTP Request Smuggling via Duplicate Content-Length Header
Jan 29, 2020
CVSS 9.1
EPSS 0.13
CVE-2019-20444
CRITICAL
Netty < 4.1.44 - HTTP Request Smuggling via Malformed HTTP Header
Jan 29, 2020
CVSS 9.1
EPSS 0.09
CVE-2019-17570
CRITICAL
Apache XML-RPC - Remote Code Execution via Untrusted Deserialization in XmlRpcResponseParser
Jan 23, 2020
CVSS 9.8
EPSS 0.49
CVE-2019-18222
MEDIUM
Arm Mbed Crypto < 3.0.0 and Mbed TLS < 2.7.13 - ECDSA Private Key Recovery via Side-Channel Attack
Jan 23, 2020
CVSS 4.7
EPSS 0.00
CVE-2019-20388
HIGH
libxml2 2.9.10 - Use-After-Free in xmlSchemaPreRun
Jan 21, 2020
CVSS 7.5
EPSS 0.04
CVE-2019-19886
HIGH
OWASP ModSecurity 3.0.0-3.0.3 - Denial of Service via Crafted Request Flood
Jan 21, 2020
CVSS 7.5
EPSS 0.03
CVE-2019-14907
MEDIUM
Samba 4.9.0-4.9.17, 4.10.0-4.10.11, 4.11.0-4.11.4 - Denial of Service via NTLMSSP Authentication String Conversion
Jan 21, 2020
CVSS 6.5
EPSS 0.03
CVE-2019-20386
LOW
systemd < 243 - Memory Leak in udevadm Trigger Execution
Jan 21, 2020
CVSS 2.4
EPSS 0.00
CVE-2019-19547
MEDIUM
Symantec Endpoint Detection and Response <4.3.0 - XSS
Jan 13, 2020
CVSS 6.1
EPSS 0.01
CVE-2019-13767
HIGH
Google Chrome <79.0.3945.88 - Use After Free
Jan 10, 2020
CVSS 8.8
EPSS 0.16
CVE-2019-5188
HIGH
e2fsprogs 1.43.3-1.45.4 - Remote Code Execution via Directory Rehashing
Jan 08, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-14834
LOW
dnsmasq < 2.81 - Denial of Service via DHCP Response Memory Leak
Jan 07, 2020
CVSS 3.7
EPSS 0.03
CVE-2019-19911
HIGH
Pillow < 6.2.2 - Denial of Service via FpxImagePlugin Integer Overflow
Jan 05, 2020
CVSS 7.5
EPSS 0.02
CVE-2019-20176
HIGH
NUCLEI
Pure-FTPd 1.0.49 - Denial of Service via Stack Exhaustion in listdir Function
Dec 31, 2019
CVSS 7.5
EPSS 0.04
CVE-2019-20093
MEDIUM
PoDoFo 0.9.6 - Denial of Service via Crafted File in PdfVariant::DelayedLoad
Dec 30, 2019
CVSS 5.5
EPSS 0.01
CVE-2019-20051
MEDIUM
UPX 3.95 - Denial of Service via Floating-Point Exception in PackLinuxElf::elf_hash
Dec 27, 2019
CVSS 5.5
EPSS 0.01
CVE-2019-20021
MEDIUM
UPX 3.95 - Heap-Based Buffer Over-Read via Crafted Mach-O File
Dec 27, 2019
CVSS 5.5
EPSS 0.01
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters