fedoraproject
5,420 tracked vulnerabilities.
CVE-2021-22570
MEDIUM
Google Protobuf < 3.15.0 - Null Pointer Dereference via Proto Symbol Parsing
Jan 26, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-45343
MEDIUM
LibreCAD 2.2.0 - Denial of Service via Crafted DXF Document
Jan 25, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-45342
HIGH
LibreCAD < 2.1.3 - Remote Code Execution via Crafted JWW Document
Jan 25, 2022
CVSS 7.8
EPSS 0.03
CVE-2021-45341
HIGH
LibreCAD < 2.2.0 - Remote Code Execution via Crafted JWW Document
Jan 25, 2022
CVSS 8.8
EPSS 0.06
CVE-2021-45417
HIGH
Advanced Intrusion Detection Environment - Out-of-Bounds Write
Jan 20, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-44537
HIGH
owncloud_desktop_client < 2.9.2 - Remote Code Execution via URL Resource Injection
Jan 15, 2022
CVSS 7.8
EPSS 0.01
CVE-2021-46022
MEDIUM
GNU Recutils <1.8.90 - Memory Corruption
Jan 14, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-46021
MEDIUM
GNU Recutils <1.8.90 - Memory Corruption
Jan 14, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-46019
MEDIUM
GNU Recutils <1.8.90 - Memory Corruption
Jan 14, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-43860
HIGH
Flatpak <1.12.3-1.10.6 - Privilege Escalation
Jan 12, 2022
CVSS 8.2
EPSS 0.00
CVE-2021-44648
HIGH
Gnome Gdkpixbuf - Out-of-Bounds Write
Jan 12, 2022
CVSS 8.8
EPSS 0.00
CVE-2021-44647
MEDIUM
Lua >= 5.4.3 - Denial of Service via Type Confusion in funcnamefromcode
Jan 11, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-29454
HIGH
Smarty < 3.1.42 - Remote Code Execution via Malicious Math String
Jan 10, 2022
CVSS 8.1
EPSS 0.01
CVE-2021-21408
HIGH
Smarty < 3.1.43 - Remote Code Execution via Restricted Static PHP Method
Jan 10, 2022
CVSS 8.8
EPSS 0.00
CVE-2021-46142
MEDIUM
uriparser < 0.9.6 - Use-After-Free in uriNormalizeSyntax
Jan 06, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-46141
MEDIUM
uriparser <0.9.6 - Memory Corruption
Jan 06, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-43816
HIGH
containerd <1.5.0-beta.0 - Info Disclosure
Jan 05, 2022
CVSS 8.0
EPSS 0.00
CVE-2021-45452
MEDIUM
Django 2.2-2.2.25, 3.2-3.2.10, 4.0-4.0.0 - Path Traversal via Storage.save
Jan 05, 2022
CVSS 5.3
EPSS 0.00
CVE-2021-45116
HIGH
Django 2.2-2.2.25, 3.2-3.2.10, 4.0-4.0.0 - Information Disclosure via dictsort Template Filter
Jan 05, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-45115
HIGH
Django <2.2.26, 3.2.<11, 4.0.<1 - DoS
Jan 05, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-3842
HIGH
nltk < 3.6.6 - Inefficient Regular Expression Complexity
Jan 04, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-41819
HIGH
Ruby CGI < 2.6.8 and CGI Gem < 0.3.1 - Cookie Security Prefix Bypass
Jan 01, 2022
CVSS 7.5
EPSS 0.01
CVE-2021-41817
HIGH
ruby-lang/date < 2.0.1 - Regular Expression Denial of Service via Date.parse
Jan 01, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-45943
MEDIUM
GDAL 3.3.0-3.4.0 - Heap-Based Buffer Overflow in PCIDSK File Reader
Jan 01, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-45942
MEDIUM
OpenEXR 3.1.0-3.1.3 - Heap-Based Buffer Overflow in LineCompositeTask
Jan 01, 2022
CVSS 5.5
EPSS 0.00
Products
fedora 5,351
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 18
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters