fedoraproject
5,423 tracked vulnerabilities.
CVE-2016-8606
CRITICAL
GNU Guile 2.0.12 - Remote Code Execution via REPL Server HTTP Inter-Protocol Attack
Jan 12, 2017
CVSS 9.8
EPSS 0.04
CVE-2016-8605
MEDIUM
GNU Guile <2.0.13 - Privilege Escalation
Jan 12, 2017
CVSS 5.3
EPSS 0.03
CVE-2016-7966
HIGH
KMail < 4.4.0 - HTML Injection via Malicious URL with Quote Character
Dec 23, 2016
CVSS 7.3
EPSS 0.02
CVE-2016-2312
MEDIUM
KDE Plasma-workspace and kscreenlocker - Unauthenticated Screen Unlock Bypass via Screen Off Action
Dec 23, 2016
CVSS 6.8
EPSS 0.00
CVE-2016-2334
HIGH
7-zip < 16.00 - Remote Code Execution via Crafted HFS+ Image
Dec 13, 2016
CVSS 7.8
EPSS 0.15
CVE-2016-7953
CRITICAL
Fedora < 1.0.9 - Memory Corruption
Dec 13, 2016
CVSS 9.8
EPSS 0.03
CVE-2016-7952
HIGH
Fedora < 1.2.2 - Improper Access Control
Dec 13, 2016
CVSS 7.5
EPSS 0.02
CVE-2016-7951
CRITICAL
Fedora < 1.2.2 - Integer Overflow
Dec 13, 2016
CVSS 9.8
EPSS 0.02
CVE-2016-7950
CRITICAL
X.org libXrender < 0.9.10 - Out-of-bounds Write via Filter Name Length
Dec 13, 2016
CVSS 9.8
EPSS 0.03
CVE-2016-7949
CRITICAL
X.org libXrender < 0.9.10 - Buffer Overflow in XvQueryAdaptors and XvQueryEncodings
Dec 13, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-7948
CRITICAL
X.org libXrandr < 1.5.1 - Out-of-bounds Write via Reply Data Mishandling
Dec 13, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-7947
CRITICAL
Fedora < 1.5.0 - Integer Overflow
Dec 13, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-7946
HIGH
X.org libXi < 1.7.7 - Denial of Service via Length Field Handling
Dec 13, 2016
CVSS 7.5
EPSS 0.03
CVE-2016-7945
HIGH
Fedora < 1.7.6 - Integer Overflow
Dec 13, 2016
CVSS 7.5
EPSS 0.03
CVE-2016-7944
CRITICAL
libXfixes < 5.0.3 - Integer Overflow via Length Value
Dec 13, 2016
CVSS 9.8
EPSS 0.03
CVE-2016-7943
CRITICAL
Fedora < 1.6.3 - Out-of-Bounds Write
Dec 13, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-7942
CRITICAL
Fedora < 1.6.3 - Out-of-Bounds Write
Dec 13, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-5407
CRITICAL
X.org libXv < 1.0.11 - Memory Corruption via XvQueryAdaptors and XvQueryEncodings
Dec 13, 2016
CVSS 9.8
EPSS 0.05
CVE-2016-9014
HIGH
Django <1.8.16-1.10.3 - Server-Side Request Forgery
Dec 09, 2016
CVSS 8.1
EPSS 0.06
CVE-2016-9013
CRITICAL
Django <1.8.16, 1.9.x <1.9.11, 1.10.x <1.10.3 - Info Disclosure
Dec 09, 2016
CVSS 9.8
EPSS 0.05
CVE-2016-1247
HIGH
nginx <1.6.2-5+deb8u3 - Privilege Escalation
Nov 29, 2016
CVSS 7.8
EPSS 0.05
CVE-2016-5195
HIGH
KEV
Linux Kernel 2.x-4.x < 4.8.3 - Local Privilege Escalation via Dirty COW Race Condition
Nov 10, 2016
CVSS 7.0
EPSS 0.84
CVE-2016-7167
CRITICAL
Fedora < 7.50.2 - Integer Overflow
Oct 07, 2016
CVSS 9.8
EPSS 0.12
CVE-2016-6323
HIGH
glibc < 2.25 - Denial of Service via makecontext Function
Oct 07, 2016
CVSS 7.5
EPSS 0.04
CVE-2016-7405
CRITICAL
ADOdb Library for PHP < 5.20.7 - SQL Injection via PDO Driver qstr Method
Oct 03, 2016
CVSS 9.8
EPSS 0.03
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters