fedoraproject
5,423 tracked vulnerabilities.
CVE-2016-3720
CRITICAL
Jackson Data Format Extension - XXE
Jun 10, 2016
CVSS 9.8
EPSS 0.03
CVE-2016-3096
HIGH
Fedora < 1.9.6 - Symlink Following
Jun 03, 2016
CVSS 7.8
EPSS 0.00
CVE-2016-3075
HIGH
Opensuse < 2.23 - Memory Corruption
Jun 01, 2016
CVSS 7.5
EPSS 0.08
CVE-2016-1234
HIGH
GNU C Library <2.24 - Buffer Overflow
Jun 01, 2016
CVSS 7.5
EPSS 0.05
CVE-2016-4021
HIGH
pgpdump <0.30 - DoS
May 26, 2016
CVSS 7.5
EPSS 0.02
CVE-2016-4037
MEDIUM
QEMU - Denial of Service
May 23, 2016
CVSS 6.0
EPSS 0.00
CVE-2016-4001
HIGH
QEMU < 2.5.1.1 - Denial of Service via Large Packet in Stellaris Ethernet Controller
May 23, 2016
CVSS 8.6
EPSS 0.05
CVE-2016-3959
HIGH
Go <1.5.4, 1.6.x <1.6.1 - DoS
May 23, 2016
CVSS 7.5
EPSS 0.04
CVE-2016-4482
MEDIUM
Linux Kernel < 4.6 - Information Disclosure via USBDEVFS_CONNECTINFO ioctl
May 23, 2016
CVSS 6.2
EPSS 0.01
CVE-2016-4544
CRITICAL
PHP < 5.5.35, 5.6.x < 5.6.21, 7.x < 7.0.6 - Denial of Service via TIFF Header Processing
May 22, 2016
CVSS 9.8
EPSS 0.07
CVE-2016-4543
CRITICAL
HP System Management Homepage < 7.5.5.6 - Memory Corruption
May 22, 2016
CVSS 9.8
EPSS 0.12
CVE-2016-4542
CRITICAL
PHP < 5.5.35, 5.6.x < 5.6.21, 7.x < 7.0.6 - Denial of Service via EXIF Header Processing
May 22, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-4541
CRITICAL
Fedora < 5.5.34 - Denial of Service
May 22, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-4540
CRITICAL
Fedora < 5.5.34 - Denial of Service
May 22, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-4539
CRITICAL
PHP < 5.5.35, 5.6.x < 5.6.21, 7.x < 7.0.6 - Denial of Service via xml_parse_into_struct
May 22, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-4538
CRITICAL
PHP < 5.5.35, 5.6.x < 5.6.21, 7.x < 7.0.6 - Denial of Service via bcpowmod Function
May 22, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-4537
CRITICAL
PHP < 5.5.35, 5.6.x < 5.6.21, 7.x < 7.0.6 - Denial of Service via bcpowmod Negative Scale Argument
May 22, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-3674
HIGH
XStream <1.4.9 - XML External Entity Injection
May 17, 2016
CVSS 7.5
EPSS 0.08
CVE-2016-2850
HIGH
Fedora - Improper Input Validation
May 13, 2016
CVSS 7.5
EPSS 0.02
CVE-2016-2849
HIGH
Debian Linux - Information Disclosure
May 13, 2016
CVSS 7.5
EPSS 0.02
CVE-2016-4008
MEDIUM
GNU Libtasn1 <4.8 - DoS
May 05, 2016
CVSS 5.9
EPSS 0.30
CVE-2016-4002
CRITICAL
QEMU < 2.6.2 - Buffer Overflow in mipsnet_receive Function
Apr 26, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-3074
CRITICAL
libgd 2.1.1 - Denial of Service and Potential Remote Code Execution via Crafted Compressed GD2 Data
Apr 26, 2016
CVSS 9.8
EPSS 0.37
CVE-2016-0741
HIGH
389 Directory Server <1.3.4.7 - DoS
Apr 19, 2016
CVSS 7.5
EPSS 0.04
CVE-2016-3960
HIGH
Xen - Integer Overflow in x86 Shadow Pagetable Code
Apr 19, 2016
CVSS 8.8
EPSS 0.00
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters