Fedoraproject
Page 21 of 55 — Fedoraproject CVEs from a corpus of 5439, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27023 | Critical | 9.8 | 2021-11-18 | A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This i… |
CVE-2021-41190 | Low | 3.0 | 2021-11-17 | The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification vers… |
CVE-2021-41164 | High | 8.2 | 2021-11-17 | CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may a… |
CVE-2021-43976 | Medium | 4.6 | 2021-11-17 | In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to… |
CVE-2021-43975 | Medium | 6.7 | 2021-11-17 | In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introd… |
CVE-2021-43337 | Medium | 6.5 | 2021-11-17 | SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access co… |
CVE-2021-42386 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function |
CVE-2021-42385 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function |
CVE-2021-42384 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special fun… |
CVE-2021-42383 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function |
CVE-2021-42382 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function |
CVE-2021-42381 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function |
CVE-2021-42380 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function |
CVE-2021-42379 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file fu… |
CVE-2021-42378 | High | 7.2 | 2021-11-15 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function |
CVE-2021-42377 | Critical | 9.8 | 2021-11-15 | An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, du… |
CVE-2021-42376 | Medium | 5.5 | 2021-11-15 | A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03… |
CVE-2021-42375 | Medium | 5.5 | 2021-11-15 | An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaki… |
CVE-2021-42374 | Medium | 5.3 | 2021-11-15 | An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This… |
CVE-2021-42373 | Medium | 5.5 | 2021-11-15 | A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given |
CVE-2021-43616 | Critical | 9.0 | 2021-11-13 | The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json… |
CVE-2020-23903 | Medium | 5.5 | 2021-11-10 | A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. |
CVE-2021-43519 | Medium | 5.5 | 2021-11-09 | Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file. |
CVE-2021-41772 | High | 7.5 | 2021-11-08 | Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename fi… |
CVE-2021-41771 | High | 7.5 | 2021-11-08 | ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an… |
CVE-2021-42072 | High | 8.8 | 2021-11-08 | An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identi… |
CVE-2021-35368 | Critical | 9.8 | 2021-11-05 | OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname. |
CVE-2021-3928 | High | 7.8 | 2021-11-05 | vim is vulnerable to Use of Uninitialized Variable |
CVE-2021-3927 | High | 7.8 | 2021-11-05 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-27836 | Medium | 6.5 | 2021-11-03 | An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file. |
CVE-2020-27820 | Medium | 4.7 | 2021-11-03 | A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remo… |
CVE-2021-43267 | Critical | 9.8 | 2021-11-02 | An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote… |
CVE-2021-37980 | High | 7.4 | 2021-11-02 | Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows. |
CVE-2021-37979 | High | 8.8 | 2021-11-02 | heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potent… |
CVE-2021-37978 | High | 8.8 | 2021-11-02 | Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37977 | High | 8.8 | 2021-11-02 | Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-42574 | High | 8.3 | 2021-11-01 | An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control se… |
CVE-2021-3756 | Critical | 9.8 | 2021-10-29 | libmysofa is vulnerable to Heap-based Buffer Overflow |
CVE-2021-43056 | Medium | 5.5 | 2021-10-28 | An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8… |
CVE-2021-3903 | High | 7.8 | 2021-10-27 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-25219 | Medium | 5.3 | 2021-10-27 | In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as rele… |
CVE-2021-41184 | Medium | 6.5 | 2021-10-26 | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrust… |
CVE-2021-41183 | Medium | 6.5 | 2021-10-26 | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from… |
CVE-2021-41182 | Medium | 6.5 | 2021-10-26 | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from un… |
CVE-2021-21703 | High | 7.8 | 2021-10-25 | In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as… |
CVE-2021-42716 | High | 7.1 | 2021-10-21 | An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer… |
CVE-2021-42715 | Medium | 5.5 | 2021-10-21 | An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length… |
CVE-2021-41160 | Medium | 5.3 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger… |
CVE-2021-41159 | Medium | 5.8 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gate… |
CVE-2021-42327 | Medium | 6.7 | 2021-10-21 | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by… |
CVE-2021-42762 | Medium | 5.3 | 2021-10-20 | BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into t… |
CVE-2021-35610 | High | 7.1 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-35608 | Medium | 5.3 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.26 and pr… |
CVE-2021-35607 | Medium | 6.5 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab… |
CVE-2021-35604 | Medium | 5.5 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior… |
CVE-2021-35603 | Low | 3.7 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35602 | Medium | 5.0 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Difficult to… |
CVE-2021-35597 | Medium | 6.5 | 2021-10-20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vul… |
CVE-2021-35596 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Error Handling). Supported versions that are affected are 8.0.26 and prior. Easil… |
CVE-2021-35591 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab… |
CVE-2021-35588 | Low | 3.1 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java S… |
CVE-2021-35586 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java S… |
CVE-2021-35578 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35577 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-35575 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-35567 | Medium | 6.8 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java… |
CVE-2021-35565 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35564 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java S… |
CVE-2021-35561 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java S… |
CVE-2021-35559 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE… |
CVE-2021-35556 | Medium | 5.3 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE… |
CVE-2021-35550 | Medium | 5.9 | 2021-10-20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE… |
CVE-2021-35546 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.26 and prior. Easily e… |
CVE-2021-2481 | Medium | 6.5 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp… |
CVE-2021-2479 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab… |
CVE-2021-2478 | Medium | 4.9 | 2021-10-20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab… |
CVE-2021-42739 | Medium | 6.7 | 2021-10-20 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/fir… |
CVE-2021-3746 | Medium | 6.5 | 2021-10-19 | A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 co… |
CVE-2021-30846 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 1… |
CVE-2021-3872 | High | 7.8 | 2021-10-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-41991 | High | 7.5 | 2021-10-18 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the c… |
CVE-2021-41990 | High | 7.5 | 2021-10-18 | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be trigge… |
CVE-2021-41611 | High | 7.5 | 2021-10-18 | An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain c… |
CVE-2021-38562 | High | 7.5 | 2021-10-18 | Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack again… |
CVE-2021-38297 | Critical | 9.8 | 2021-10-18 | Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is us… |
CVE-2021-28021 | High | 7.8 | 2021-10-15 | Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. |
CVE-2021-3875 | Medium | 5.5 | 2021-10-15 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-41800 | Medium | 5.3 | 2021-10-11 | MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometime… |
CVE-2021-41799 | High | 7.5 | 2021-10-11 | MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backli… |
CVE-2021-41798 | Medium | 6.1 | 2021-10-11 | MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page. |
CVE-2021-37976 | Medium | 6.5 | 2021-10-08 | Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from proces… |
CVE-2021-37975 | High | 8.8 | 2021-10-08 | Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37974 | High | 8.8 | 2021-10-08 | Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2021-37973 | Critical | 9.6 | 2021-10-08 | Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sa… |
CVE-2021-37972 | High | 8.8 | 2021-10-08 | Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-37971 | Medium | 4.3 | 2021-10-08 | Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a c… |
CVE-2021-37970 | High | 8.8 | 2021-10-08 | Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-37969 | High | 7.8 | 2021-10-08 | Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalatio… |
CVE-2021-37968 | Medium | 4.3 | 2021-10-08 | Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted H… |
CVE-2021-37967 | Medium | 4.3 | 2021-10-08 | Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process… |