fedoraproject
5,423 tracked vulnerabilities.
CVE-2019-14833
MEDIUM
Samba <4.9.15, 4.10.10, 4.11.2 - Info Disclosure
Nov 06, 2019
CVSS 5.4
EPSS 0.02
CVE-2019-10218
MEDIUM
Samba <4.11.2, 4.10.10, 4.9.15 - Path Traversal
Nov 06, 2019
CVSS 6.5
EPSS 0.04
CVE-2019-18425
CRITICAL
Xen < 4.12.1 - 32-bit PV Guest Privilege Escalation via Descriptor Table Limit Bypass
Oct 31, 2019
CVSS 9.8
EPSS 0.03
CVE-2019-18424
MEDIUM
Xen < 4.12.1 - Privilege Escalation via DMA in PCI Passthrough
Oct 31, 2019
CVSS 6.8
EPSS 0.00
CVE-2019-18423
HIGH
Xen 4.8-4.12.x - Denial of Service via XENMEM_add_to_physmap Hypercall
Oct 31, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-18422
HIGH
Xen <4.12.x - DoS/Privilege Escalation
Oct 31, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-18421
HIGH
Xen < 4.12.1 - Privilege Escalation via Pagetable Promotion/Demotion Race Condition
Oct 31, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-18420
MEDIUM
Xen < 4.12.1 - Denial of Service via VCPUOP_initialise Hypercall Format String
Oct 31, 2019
CVSS 6.5
EPSS 0.03
CVE-2019-11043
HIGH
KEV
PHP 7.1.x < 7.1.33, 7.2.x < 7.2.24, 7.3.x < 7.3.11 - Remote Code Execution via FPM Buffer Overflow
Oct 28, 2019
CVSS 8.7
EPSS 0.99
CVE-2019-17596
HIGH
GO < 1.12.11 - Interpretation Conflict
Oct 24, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-15587
MEDIUM
Loofah < 2.3.0 - Cross-Site Scripting via SVG Element
Oct 22, 2019
CVSS 5.4
EPSS 0.02
CVE-2019-17498
HIGH
libssh2 < 1.9.0 - Integer Overflow in SSH_MSG_DISCONNECT Bounds Check
Oct 21, 2019
CVSS 8.1
EPSS 0.04
CVE-2019-18218
HIGH
file < 5.37 - Heap-Based Buffer Overflow in cdf_read_property_info
Oct 21, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-14287
HIGH
NUCLEI
Sudo <1.8.28 - Privilege Escalation
Oct 17, 2019
CVSS 8.8
EPSS 0.64
CVE-2019-3018
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service in InnoDB
Oct 16, 2019
CVSS 4.4
EPSS 0.02
CVE-2019-3011
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service via C API
Oct 16, 2019
CVSS 6.5
EPSS 0.03
CVE-2019-3009
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service via Connection Component
Oct 16, 2019
CVSS 4.4
EPSS 0.03
CVE-2019-3004
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service via Parser
Oct 16, 2019
CVSS 6.5
EPSS 0.03
CVE-2019-2998
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service in Optimizer
Oct 16, 2019
CVSS 4.9
EPSS 0.03
CVE-2019-2997
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service in DDL Component
Oct 16, 2019
CVSS 4.9
EPSS 0.03
CVE-2019-2993
MEDIUM
MySQL Server <= 5.7.27 and <= 8.0.17 - Denial of Service in C API
Oct 16, 2019
CVSS 5.3
EPSS 0.02
CVE-2019-2991
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service and Data Manipulation via Optimizer
Oct 16, 2019
CVSS 5.5
EPSS 0.02
CVE-2019-2982
MEDIUM
MySQL Server < 8.0.17 - Authenticated Denial of Service in Optimizer
Oct 16, 2019
CVSS 4.9
EPSS 0.03
CVE-2019-2974
MEDIUM
MySQL Server < 5.6.45, 5.7.27, 8.0.17 - Authenticated Denial of Service in Optimizer
Oct 16, 2019
CVSS 6.5
EPSS 0.04
CVE-2019-2968
MEDIUM
MySQL < 8.0.17 - Authenticated Denial of Service in InnoDB
Oct 16, 2019
CVSS 4.9
EPSS 0.03
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters