fedoraproject

5,423 tracked vulnerabilities.

CVE-2019-7576 HIGH
SDL <2.0.10 - Buffer Overflow
Feb 07, 2019
CVSS 8.8
EPSS 0.03
CVE-2019-7575 HIGH
SDL <2.0.9 - Buffer Overflow
Feb 07, 2019
CVSS 8.8
EPSS 0.03
CVE-2019-7574 HIGH
SDL <2.0.9 - Buffer Overflow
Feb 07, 2019
CVSS 8.8
EPSS 0.03
CVE-2019-7573 HIGH
SDL <2.0.9 - Buffer Overflow
Feb 07, 2019
CVSS 8.8
EPSS 0.03
CVE-2019-7572 HIGH
SDL <2.0.9 - Buffer Overflow
Feb 07, 2019
CVSS 8.8
EPSS 0.03
CVE-2019-3464 CRITICAL
rssh - Remote Code Execution via Environment Variable Injection
Feb 06, 2019
CVSS 9.8
EPSS 0.05
CVE-2019-3463 CRITICAL
rssh - Command Injection via Insufficient Argument Sanitization
Feb 06, 2019
CVSS 9.8
EPSS 0.05
CVE-2019-1000020 MEDIUM
libarchive 2.8.0-3.4.0 - Denial of Service via ISO9660 Rockridge Extension Parsing
Feb 04, 2019
CVSS 6.5
EPSS 0.03
CVE-2019-1000019 MEDIUM
libarchive <v3.0.2 - Out-of-bounds Read
Feb 04, 2019
CVSS 6.5
EPSS 0.03
CVE-2019-1000018 HIGH
rssh 2.3.4 - Authenticated Command Injection via allowscp Permission
Feb 04, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-7310 HIGH
Poppler 0.73.0 - Heap-Based Buffer Over-Read via XRef::getEntry Integer Signedness Error
Feb 03, 2019
CVSS 7.8
EPSS 0.02
CVE-2019-7282 MEDIUM
NetKit <0.17 - Privilege Escalation
Jan 31, 2019
CVSS 5.9
EPSS 0.02
CVE-2019-6111 MEDIUM
OpenSSH < 7.9 - Arbitrary File Write via Malicious SCP Server
Jan 31, 2019
CVSS 5.9
EPSS 0.58
CVE-2019-6109 MEDIUM
OpenSSH < 7.9 - Terminal Output Manipulation via ANSI Control Codes in Progress Display
Jan 31, 2019
CVSS 6.8
EPSS 0.04
CVE-2019-6446 CRITICAL
NumPy < 1.16.3 - Remote Code Execution via Unsafe Pickle Deserialization
Jan 16, 2019
CVSS 9.8
EPSS 0.17
CVE-2019-0001 HIGH
Juniper Junos OS - Denial of Service via Malformed Packet in BBE-SMGD
Jan 15, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-3811 MEDIUM
sssd < 2.1 - Unintended Home Directory Path Disclosure
Jan 15, 2019
CVSS 5.2
EPSS 0.01
CVE-2019-6251 HIGH
WebKitGTK & WPE WebKit <2.24.1 - SSRF
Jan 14, 2019
CVSS 8.1
EPSS 0.04
CVE-2019-3498 MEDIUM
Django 1.11.x < 1.11.18, 2.0.x < 2.0.10, 2.1.x < 2.1.5 - Content Spoofing via 404 Error Page
Jan 09, 2019
CVSS 6.5
EPSS 0.04
CVE-2019-3500 HIGH
aria2 1.33.1 - Sensitive Information Exposure via HTTP Basic Authentication Log Storage
Jan 02, 2019
CVSS 7.8
EPSS 0.00
CVE-2018-14628 MEDIUM
Samba 4.0.0-4.18.8 - Authenticated Information Disclosure in LDAP Server
Jan 17, 2023
CVSS 4.3
EPSS 0.01
CVE-2018-25032 HIGH
zlib <1.2.12 - Memory Corruption
Mar 25, 2022
CVSS 7.5
EPSS 0.52
CVE-2018-10756 HIGH
Transmission < 3.00 - Use-After-Free via Crafted Torrent File
May 15, 2020
CVSS 7.8
EPSS 0.03
CVE-2018-1285 CRITICAL
Apache log4net < 2.0.10 - XML External Entity Injection in Configuration Parser
May 11, 2020
CVSS 9.8
EPSS 0.17
CVE-2018-14553 HIGH
libgd 2.1.0-rc2-2.2.5 - NULL Pointer Dereference via gdImageClone
Feb 11, 2020
CVSS 7.5
EPSS 0.03
Products
fedora 5,353 extra_packages_for_enterprise_linux 76 389_directory_server 39 sssd 19 fedora_core 8 389_administration_server 1 anaconda 1 arm_installer 1 commons 1 coolkey 1 crypto-utils 1 fedmsg 1 fedora_linux_kernel 1 python-fedora 1 sectool 1 selinux-policy 1 spin-kickstarts 1 supybot-fedora 1 unbound 1
Quick Filters
Critical CVEs With Exploits In CISA KEV