fedoraproject

5,423 tracked vulnerabilities.

CVE-2019-3885 LOW
Pacemaker <= 2.0.1 - Use-After-Free
Apr 18, 2019
CVSS 3.3
EPSS 0.02
CVE-2019-0228 CRITICAL
Apache PDFBox 2.0.14 - XML External Entity Injection via XFDF
Apr 17, 2019
CVSS 9.8
EPSS 0.09
CVE-2019-9499 HIGH
hostapd and wpa_supplicant < 2.4 - Origin Validation Error in EAP-PWD Commit
Apr 17, 2019
CVSS 8.1
EPSS 0.02
CVE-2019-9498 HIGH
hostapd and wpa_supplicant <= 2.4 - Authentication Bypass via Invalid EAP-PWD Scalar/Element Values
Apr 17, 2019
CVSS 8.1
EPSS 0.02
CVE-2019-9497 HIGH
hostapd & wpa_supplicant <SAE - Auth Bypass
Apr 17, 2019
CVSS 8.1
EPSS 0.05
CVE-2019-9496 HIGH
hostapd and wpa_supplicant < 2.7 - Denial of Service via SAE Confirm Message
Apr 17, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-9495 LOW
hostapd/wpa_supplicant <2.7 - Info Disclosure
Apr 17, 2019
CVSS 3.7
EPSS 0.03
CVE-2019-9494 MEDIUM
Hostapd & Wpa_Supplicant <2.7 - Info Disclosure
Apr 17, 2019
CVSS 5.9
EPSS 0.04
CVE-2019-3883 HIGH
389 Directory Server < 1.4.1.2 - Unauthenticated Denial of Service via SSL/TLS Connection Hang
Apr 17, 2019
CVSS 7.5
EPSS 0.08
CVE-2019-11068 CRITICAL
libxslt <= 1.1.33 - Protection Mechanism Bypass via Crafted URL
Apr 10, 2019
CVSS 9.8
EPSS 0.05
CVE-2019-11065 MEDIUM
Gradle 1.4-5.3.1 - Dependency Download Man-in-the-Middle via Insecure HTTP URL
Apr 10, 2019
CVSS 5.9
EPSS 0.01
CVE-2019-3842 HIGH
systemd < 242-rc4 - Improper Authorization via XDG_SEAT Environment Variable
Apr 09, 2019
CVSS 7.0
EPSS 0.01
CVE-2019-9133 MEDIUM
KMPlayer < 2018.12.24.14 - Integer Underflow via Subtitle Processing
Apr 09, 2019
CVSS 5.5
EPSS 0.02
CVE-2019-3887 MEDIUM
Linux Kernel >= 4.16 - Denial of Service via KVM x2APIC MSR Access
Apr 09, 2019
CVSS 5.6
EPSS 0.00
CVE-2019-3880 MEDIUM
Samba 3.2.0-4.8.10 - Unauthenticated Path Traversal via Registry RPC Endpoint
Apr 09, 2019
CVSS 5.4
EPSS 0.03
CVE-2019-3870 MEDIUM
Samba 4.9.0-4.9.6 - Incorrect Default Permissions in AD DC Installation Directory
Apr 09, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-10903 HIGH
Wireshark 2.4.0-2.4.13, 2.6.0-2.6.7, 3.0.0 - Denial of Service in DCERPC SPOOLSS Dissector
Apr 09, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-10902 HIGH
Wireshark 3.0.0 - Denial of Service in TSDNS Dissector
Apr 09, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-10901 HIGH
Wireshark 2.4.0-2.4.13, 2.6.0-2.6.7, 3.0.0 - Denial of Service in LDSS Dissector
Apr 09, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-10900 HIGH
Wireshark 3.0.0 - Denial of Service via Rbm Dissector Infinite Loop
Apr 09, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-10899 HIGH
Wireshark 2.4.0-2.4.13, 2.6.0-2.6.7, 3.0.0 - Out-of-bounds Read in SRVLOC Dissector
Apr 09, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-10898 HIGH
Wireshark 3.0.0 - Denial of Service via GSUP Dissector Infinite Loop
Apr 09, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-10897 HIGH
Wireshark 3.0.0 - Denial of Service via IEEE 802.11 Dissector Infinite Loop
Apr 09, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-10896 HIGH
Wireshark 2.4.0-2.4.13, 2.6.0-2.6.7, 3.0.0 - Denial of Service in DOF Dissector
Apr 09, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-10895 HIGH
Opensuse Leap < 2.4.13 - Out-of-Bounds Read
Apr 09, 2019
CVSS 7.5
EPSS 0.06
Products
fedora 5,353 extra_packages_for_enterprise_linux 76 389_directory_server 39 sssd 19 fedora_core 8 389_administration_server 1 anaconda 1 arm_installer 1 commons 1 coolkey 1 crypto-utils 1 fedmsg 1 fedora_linux_kernel 1 python-fedora 1 sectool 1 selinux-policy 1 spin-kickstarts 1 supybot-fedora 1 unbound 1
Quick Filters
Critical CVEs With Exploits In CISA KEV