fedoraproject

CVE-2019-10894 HIGH

Wireshark 2.4.0-2.4.13, 2.6.0-2.6.7, 3.0.0 - Denial of Service in GSS-API Dissector

Apr 09, 2019

CVSS 7.5

EPSS 0.06

CVE-2019-9844 MEDIUM

Khan Academy simple-markdown <0.4.4 - XSS

Apr 09, 2019

CVSS 6.1

EPSS 0.01

CVE-2019-11026 MEDIUM

Poppler 0.75.0 - Denial of Service via Infinite Recursion in FontInfoScanner

Apr 08, 2019

CVSS 6.5

EPSS 0.02

CVE-2019-0211 HIGH KEV

Apache HTTP Server 2.4.17-2.4.38 - Use-After-Free in Scoreboard

Apr 08, 2019

CVSS 7.8

EPSS 0.65

CVE-2019-0217 HIGH

Apache HTTP Server < 2.4.38 - Authentication Bypass via Race Condition in mod_auth_digest

Apr 08, 2019

CVSS 7.5

EPSS 0.18

CVE-2019-0215 HIGH

Apache HTTP Server <2.4.39 - Auth Bypass

Apr 08, 2019

CVSS 7.5

EPSS 0.11

CVE-2019-10740 MEDIUM

Opensuse Leap < 1.3.10 - Cleartext Transmission

Apr 07, 2019

CVSS 4.3

EPSS 0.01

CVE-2019-10906 HIGH

Pallets Jinja <2.10.1 - RCE

Apr 07, 2019

CVSS 8.6

EPSS 0.04

CVE-2019-3886 MEDIUM

libvirt >=4.8.0 <5.3.0 - Missing Authorization for Guest Agent APIs

Apr 04, 2019

CVSS 5.4

EPSS 0.01

CVE-2019-3836 MEDIUM

gnutls 3.6.3-3.6.6 - Denial of Service via Post-Handshake Message Handling

Apr 01, 2019

CVSS 5.9

EPSS 0.03

CVE-2019-0160 CRITICAL

EDK II - Unauthenticated Buffer Overflow via Network Access

Mar 27, 2019

CVSS 9.8

EPSS 0.01

CVE-2019-3829 MEDIUM

GnuTLS 3.5.8-3.6.6 - Memory Corruption via Certificate Verification API

Mar 27, 2019

CVSS 5.3

EPSS 0.59

CVE-2019-5420 CRITICAL

Ruby On Rails DoubleTap Development Mode secret_key_base Vulnerability

Mar 27, 2019

CVSS 9.8

EPSS 0.92

CVE-2019-5419 HIGH

Action View (Rails) <5.2.2.1-5.0.7.2 - DoS

Mar 27, 2019

CVSS 7.5

EPSS 0.09

CVE-2019-5418 HIGH KEVNUCLEI

Ruby On Rails File Content Disclosure (

Mar 27, 2019

CVSS 7.5

EPSS 0.99

CVE-2019-3877 MEDIUM

mod_auth_mellon < 0.14.2 - Open Redirect via Backslash URL Bypass

Mar 27, 2019

CVSS 5.8

EPSS 0.02

CVE-2019-9917 MEDIUM

ZNC < 1.7.3-rc1 - Denial of Service via Invalid Encoding

Mar 27, 2019

CVSS 6.5

EPSS 0.03

CVE-2019-6341 MEDIUM

Drupal 7 < 7.65 - Cross-Site Scripting via File Upload

Mar 26, 2019

CVSS 5.4

EPSS 0.12

CVE-2019-3878 HIGH

mod_auth_mellon <0.14.2 - Auth Bypass

Mar 26, 2019

CVSS 8.1

EPSS 0.03

CVE-2019-3851 MEDIUM

Moodle <3.6.3-3.5.5 - Info Disclosure

Mar 26, 2019

CVSS 4.3

EPSS 0.01

CVE-2019-3804 HIGH

cockpit < 184 - Unauthenticated Denial of Service via Invalid Base64-Encoded Cookie

Mar 26, 2019

CVSS 7.5

EPSS 0.05

CVE-2019-3857 HIGH

libssh2 < 1.8.1 - Remote Code Execution via SSH_MSG_CHANNEL_REQUEST Packet Parsing

Mar 25, 2019

CVSS 8.8

EPSS 0.06

CVE-2019-3856 HIGH

libssh2 < 1.8.1 - Remote Code Execution via Keyboard Prompt Request Parsing

Mar 25, 2019

CVSS 8.8

EPSS 0.06

CVE-2019-3838 MEDIUM

Ghostscript <9.27 - File System Access

Mar 25, 2019

CVSS 5.5

EPSS 0.03

CVE-2019-3835 MEDIUM

Ghostscript < 9.27 - Privileged API Misuse via Superexec Operator

Mar 25, 2019

CVSS 5.5

EPSS 0.03