fedoraproject
5,423 tracked vulnerabilities.
CVE-2019-16237
HIGH
dino < 0.1.0 - Origin Validation Error in MAM Message Source Check
Sep 11, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-16236
HIGH
dino < 0.1.0 - Missing Authorization in Roster Push
Sep 11, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-16235
HIGH
dino < 0.1.0 - Origin Validation Error in Carbons Message Handling
Sep 11, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-16232
MEDIUM
Linux kernel <5.2.14 - Use After Free
Sep 11, 2019
CVSS 4.1
EPSS 0.01
CVE-2019-16168
MEDIUM
SQLite < 3.29.0 - Denial of Service via Missing Validation in Query Planner
Sep 09, 2019
CVSS 6.5
EPSS 0.04
CVE-2019-16167
MEDIUM
sysstat <12.1.6 - Memory Corruption
Sep 09, 2019
CVSS 5.5
EPSS 0.02
CVE-2019-16163
HIGH
Oniguruma <6.9.3 - Memory Corruption
Sep 09, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-16159
HIGH
BIRD Internet Routing Daemon <2.0.5 - Buffer Overflow
Sep 09, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-9854
HIGH
LibreOffice 6.2.0-6.2.6 - Path Traversal via URL Encoding Bypass
Sep 06, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-16056
HIGH
Python < 2.7.16, 3.x < 3.5.8, 3.6.x < 3.6.10, 3.7.x < 3.7.5 - Email Address Parsing Bypass via Multiple @ Characters
Sep 06, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-14813
CRITICAL
Ghostscript 9.00-9.49 - Unauthenticated Privilege Escalation via setsystemparams Procedure
Sep 06, 2019
CVSS 9.8
EPSS 0.11
CVE-2019-15946
MEDIUM
OpenSC <0.20.0-rc1 - Buffer Overflow
Sep 05, 2019
CVSS 6.4
EPSS 0.00
CVE-2019-15945
MEDIUM
OpenSC <0.20.0-rc1 - Buffer Overflow
Sep 05, 2019
CVSS 6.4
EPSS 0.00
CVE-2019-15718
MEDIUM
systemd 240 - Unauthenticated D-Bus Access Control Bypass via sd_bus_set_trusted
Sep 04, 2019
CVSS 4.4
EPSS 0.01
CVE-2019-14817
HIGH
Ghostscript < 9.50 - Privilege Escalation via Unsecured Privileged API Calls
Sep 03, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-14811
HIGH
Ghostscript < 9.50 - Privilege Escalation via .pdf_hook_DSC_Creator Bypass
Sep 03, 2019
CVSS 7.8
EPSS 0.04
CVE-2019-12402
HIGH
Apache Commons Compress <1.19 - DoS
Aug 30, 2019
CVSS 7.5
EPSS 0.16
CVE-2019-11500
CRITICAL
Dovecot < 2.2.36.4 and 2.3.x < 2.3.7.2 - Out-of-bounds Write via Quoted String Processing
Aug 29, 2019
CVSS 9.8
EPSS 0.63
CVE-2019-15538
HIGH
Opensuse Leap < 4.9.191 - Denial of Service
Aug 25, 2019
CVSS 7.5
EPSS 0.04
CVE-2019-15531
MEDIUM
GNU Libextractor <= 1.9 - Heap-Based Buffer Over-Read in DVI Extractor
Aug 23, 2019
CVSS 6.5
EPSS 0.02
CVE-2019-10746
CRITICAL
mixin-deep < 1.3.2 - Prototype Pollution via Constructor Payload
Aug 23, 2019
CVSS 9.8
EPSS 0.04
CVE-2019-10086
HIGH
Apache Commons Beanutils 1.9.2 - Info Disclosure
Aug 20, 2019
CVSS 7.3
EPSS 0.30
CVE-2019-2126
HIGH
Android 7.0-9 - Use-After-Free in mkvparser.cc
Aug 20, 2019
CVSS 8.8
EPSS 0.05
CVE-2019-15237
HIGH
Roundcube Webmail <= 1.3.9 - Homograph Attack via Punycode Domain Handling
Aug 20, 2019
CVSS 7.4
EPSS 0.01
CVE-2019-15151
CRITICAL
AdPlug 2.3.1 - Double Free in Cu6mPlayer Class
Aug 18, 2019
CVSS 9.8
EPSS 0.02
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters