fedoraproject

5,423 tracked vulnerabilities.

CVE-2015-1051
Drupal Context <7.x-3.6 - Open Redirect
Jan 15, 2015
EPSS 0.02
CVE-2014-0147 MEDIUM
Qemu < 1.6.2 - Denial of Service via QCOW2 Snapshot Refcount Logic Error
Sep 29, 2022
CVSS 6.2
EPSS 0.00
CVE-2014-8089 CRITICAL
Zend Framework < 1.12.9, 2.2.x < 2.2.8, 2.3.x < 2.3.3 - SQL Injection via Null Byte
Feb 17, 2020
CVSS 9.8
EPSS 0.03
CVE-2014-2581 HIGH
smb4k < 1.1.1 - Insufficiently Protected Credentials via cuid Option
Jan 28, 2020
CVSS 7.5
EPSS 0.03
CVE-2014-4172 CRITICAL
Jasig Java CAS Client <3.3.2, .NET CAS Client <1.0.2, phpCAS <1.3.3 - URL Parameter Injection
Jan 24, 2020
CVSS 9.8
EPSS 0.06
CVE-2014-5118 MEDIUM
Trusted Boot < 1.8.2 - Security Bypass via Loader Component
Nov 18, 2019
CVSS 5.5
EPSS 0.00
CVE-2014-0021 HIGH
chrony < 1.29.1 - Traffic Amplification via cmdmon Protocol
Nov 15, 2019
CVSS 7.5
EPSS 0.04
CVE-2014-1400 MEDIUM
Entity API 7.x-1.x < 7.x-1.3 - Authenticated Access Control Bypass via Unpublished Comments
Apr 10, 2018
CVSS 6.5
EPSS 0.01
CVE-2014-1399 MEDIUM
Entity API 7.x-1.x < 7.x-1.3 - Authenticated Access Control Bypass
Apr 10, 2018
CVSS 6.5
EPSS 0.01
CVE-2014-1398 MEDIUM
Entity API 7.x-1.x < 7.x-1.3 - Authenticated Access Control Bypass
Apr 10, 2018
CVSS 6.5
EPSS 0.01
CVE-2014-7272 HIGH
SDDM <0.10.0 - Privilege Escalation
Mar 08, 2018
CVSS 7.8
EPSS 0.00
CVE-2014-7271 HIGH
SDDM <0.10.0 - Privilege Escalation
Mar 08, 2018
CVSS 7.8
EPSS 0.00
CVE-2014-3219 HIGH
fish < 2.1.1 - Arbitrary File Write via Symlink Attack on Temporary Files
Feb 09, 2018
CVSS 7.8
EPSS 0.00
CVE-2014-3005 CRITICAL
Zabbix 1.8.x-1.8.20 2.0.x-2.0.12 2.2.x-2.2.4 2.3.x-2.3.1 - XML External Entity Injection via DTD in XML Request
Feb 01, 2018
CVSS 9.8
EPSS 0.05
CVE-2014-1859 MEDIUM
NumPy < 1.8.1 - Arbitrary File Write via Symlink Attack on Temporary Files
Jan 08, 2018
CVSS 5.5
EPSS 0.00
CVE-2014-8119 HIGH
Fedora < 0.2.6 - Improper Input Validation
Dec 29, 2017
CVSS 7.5
EPSS 0.03
CVE-2014-4978 MEDIUM
Rawstudio - Local Privilege Escalation
Dec 29, 2017
CVSS 5.5
EPSS 0.00
CVE-2014-9092 MEDIUM
libjpeg-turbo < 1.3.1 - Denial of Service via Crafted JPEG Exif Marker
Oct 10, 2017
CVSS 6.5
EPSS 0.03
CVE-2014-9637 MEDIUM
GNU patch <2.7.2 - DoS
Aug 25, 2017
CVSS 5.5
EPSS 0.02
CVE-2014-9114 HIGH
util-linux <2.26rc-1 - RCE
Mar 31, 2017
CVSS 7.8
EPSS 0.01
CVE-2014-9761 CRITICAL
GNU C Library <2.23 - Buffer Overflow
Apr 19, 2016
CVSS 9.8
EPSS 0.06
CVE-2014-8112
389 Directory Server 1.3.1.x, 1.3.2.x < 1.3.2.27, 1.3.3.x < 1.3.3.9 - Sensitive Info Exposure via Changelog
Mar 10, 2015
EPSS 0.02
CVE-2014-8105
389 Directory Server <1.3.2.27/1.3.3.x<1.3.3.9 - Unauthenticated Sensitive Info Exposure via Changelog
Mar 10, 2015
EPSS 0.02
CVE-2014-9472
RT <4.0.23, <4.2.10 - DoS
Mar 09, 2015
EPSS 0.03
CVE-2014-9465
Zarafa WebApp <2.0 beta 3 & ZCP 7.x <7.1.12 beta 1 & 7.2.x <7.2.0 b...
Feb 19, 2015
EPSS 0.03
Products
fedora 5,353 extra_packages_for_enterprise_linux 76 389_directory_server 39 sssd 19 fedora_core 8 389_administration_server 1 anaconda 1 arm_installer 1 commons 1 coolkey 1 crypto-utils 1 fedmsg 1 fedora_linux_kernel 1 python-fedora 1 sectool 1 selinux-policy 1 spin-kickstarts 1 supybot-fedora 1 unbound 1
Quick Filters
Critical CVEs With Exploits In CISA KEV