Fedoraproject
Page 20 of 55 — Fedoraproject CVEs from a corpus of 5439, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4064 | High | 8.8 | 2021-12-23 | Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4063 | High | 8.8 | 2021-12-23 | Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-4062 | High | 8.8 | 2021-12-23 | Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
CVE-2021-4061 | High | 8.8 | 2021-12-23 | Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4059 | Medium | 6.5 | 2021-12-23 | Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-4058 | High | 8.8 | 2021-12-23 | Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4057 | High | 8.8 | 2021-12-23 | Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea… |
CVE-2021-4056 | High | 8.8 | 2021-12-23 | Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4055 | High | 8.8 | 2021-12-23 | Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentia… |
CVE-2021-4054 | Medium | 6.5 | 2021-12-23 | Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-4053 | High | 8.8 | 2021-12-23 | Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4052 | High | 8.8 | 2021-12-23 | Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
CVE-2021-38022 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML… |
CVE-2021-38021 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML… |
CVE-2021-38020 | Medium | 4.3 | 2021-12-23 | Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omn… |
CVE-2021-38019 | Medium | 6.5 | 2021-12-23 | Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38018 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-38017 | High | 8.8 | 2021-12-23 | Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a craf… |
CVE-2021-38016 | High | 8.8 | 2021-12-23 | Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted… |
CVE-2021-38015 | High | 8.8 | 2021-12-23 | Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypas… |
CVE-2021-38014 | High | 8.8 | 2021-12-23 | Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-38013 | Critical | 9.6 | 2021-12-23 | Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render… |
CVE-2021-38012 | High | 8.8 | 2021-12-23 | Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38011 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-38010 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to by… |
CVE-2021-38009 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38008 | High | 8.8 | 2021-12-23 | Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38007 | High | 8.8 | 2021-12-23 | Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38006 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-38005 | High | 8.8 | 2021-12-23 | Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-44733 | High | 7.0 | 2021-12-22 | A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_g… |
CVE-2021-45293 | Medium | 5.5 | 2021-12-21 | A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet. |
CVE-2021-45290 | High | 7.5 | 2021-12-21 | A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable. |
CVE-2021-45451 | High | 7.5 | 2021-12-21 | In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to a… |
CVE-2021-45450 | High | 7.5 | 2021-12-21 | In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output bu… |
CVE-2021-44790 | Critical | 9.8 | 2021-12-20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is… |
CVE-2021-44224 | High | 8.2 | 2021-12-20 | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward… |
CVE-2021-4136 | High | 7.8 | 2021-12-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-41500 | High | 7.5 | 2021-12-17 | Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvx… |
CVE-2021-4011 | High | 7.8 | 2021-12-17 | A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The hig… |
CVE-2021-4010 | High | 7.8 | 2021-12-17 | A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. Th… |
CVE-2021-4009 | High | 7.8 | 2021-12-17 | A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier func… |
CVE-2021-4008 | High | 7.8 | 2021-12-17 | A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function… |
CVE-2021-45078 | High | 7.8 | 2021-12-15 | stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have uns… |
CVE-2021-43518 | High | 7.8 | 2021-12-15 | Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buff… |
CVE-2021-45046 | Critical | 9.0 | 2021-12-14 | It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers wi… |
CVE-2021-4104 | High | 7.5 | 2021-12-14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can pro… |
CVE-2021-43818 | High | 8.2 | 2021-12-13 | lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content… |
CVE-2020-16156 | High | 7.8 | 2021-12-13 | CPAN 2.28 allows Signature Verification Bypass. |
CVE-2020-16154 | High | 7.8 | 2021-12-13 | The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. |
CVE-2021-44847 | Critical | 9.8 | 2021-12-13 | A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calcul… |
CVE-2021-44228 | Critical | 10.0 | 2021-12-10 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter… |
CVE-2021-4048 | Critical | 9.1 | 2021-12-08 | An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before vers… |
CVE-2021-44420 | High | 7.3 | 2021-12-08 | In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based… |
CVE-2021-44686 | High | 7.5 | 2021-12-07 | calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conve… |
CVE-2021-4069 | High | 7.8 | 2021-12-06 | vim is vulnerable to Use After Free |
CVE-2021-3984 | High | 7.8 | 2021-12-01 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-4019 | High | 7.8 | 2021-12-01 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3802 | Medium | 4.2 | 2021-11-29 | A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from thi… |
CVE-2021-44225 | Medium | 5.4 | 2021-11-26 | In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property… |
CVE-2021-41270 | Medium | 6.5 | 2021-11-24 | Symfony/Serializer handles serializing and deserializing data structures for Symfony, a PHP framework for web and console applications and a set of reusable PH… |
CVE-2021-28709 | High | 7.8 | 2021-11-24 | issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr… |
CVE-2021-28705 | High | 7.8 | 2021-11-24 | issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr… |
CVE-2021-28708 | High | 8.8 | 2021-11-24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV… |
CVE-2021-28707 | High | 8.8 | 2021-11-24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV… |
CVE-2021-28706 | High | 8.6 | 2021-11-24 | guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its… |
CVE-2021-28704 | High | 8.8 | 2021-11-24 | PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV… |
CVE-2021-38003 | High | 8.8 | 2021-11-23 | Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-38002 | Critical | 9.6 | 2021-11-23 | Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag… |
CVE-2021-38001 | High | 8.8 | 2021-11-23 | Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38000 | Medium | 6.1 | 2021-11-23 | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a m… |
CVE-2021-37999 | Medium | 6.1 | 2021-11-23 | Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new brow… |
CVE-2021-37998 | High | 8.8 | 2021-11-23 | Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-37997 | High | 8.8 | 2021-11-23 | Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap… |
CVE-2021-41281 | High | 7.5 | 2021-11-23 | Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tr… |
CVE-2021-3672 | Medium | 5.6 | 2021-11-23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong host… |
CVE-2021-44143 | Critical | 9.8 | 2021-11-22 | A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted mail message… |
CVE-2021-43560 | Medium | 5.3 | 2021-11-22 | A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it p… |
CVE-2021-43559 | High | 8.8 | 2021-11-22 | A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality… |
CVE-2021-43558 | Medium | 6.1 | 2021-11-22 | A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A URL parameter in the filetype site adm… |
CVE-2021-3935 | High | 8.1 | 2021-11-22 | When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established… |
CVE-2021-28710 | High | 8.8 | 2021-11-21 | certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable h… |
CVE-2021-21898 | High | 8.8 | 2021-11-19 | A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg… |
CVE-2021-40391 | Critical | 9.8 | 2021-11-19 | An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version… |
CVE-2021-21900 | High | 8.8 | 2021-11-19 | A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can… |
CVE-2021-21899 | High | 8.8 | 2021-11-19 | A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg… |
CVE-2021-39929 | High | 7.5 | 2021-11-19 | Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted… |
CVE-2021-39926 | High | 7.5 | 2021-11-19 | Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file |
CVE-2021-39925 | High | 7.5 | 2021-11-19 | Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture… |
CVE-2021-39924 | High | 7.5 | 2021-11-19 | Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
CVE-2021-39922 | High | 7.5 | 2021-11-19 | Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
CVE-2021-39921 | High | 7.5 | 2021-11-19 | NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture… |
CVE-2021-3973 | High | 7.8 | 2021-11-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3968 | High | 8.0 | 2021-11-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3974 | High | 7.8 | 2021-11-19 | vim is vulnerable to Use After Free |
CVE-2021-44026 | Critical | 9.8 | 2021-11-19 | Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params. |
CVE-2021-44025 | Medium | 6.1 | 2021-11-19 | Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message. |
CVE-2021-39928 | High | 7.5 | 2021-11-18 | NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted ca… |
CVE-2021-39920 | High | 7.5 | 2021-11-18 | NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file |
CVE-2021-27025 | Medium | 6.5 | 2021-11-18 | A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the fi… |