Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: fedoraproject Clear
ID Title
CVE-2024-34397 Vulnerability in gnome (CVE-2024-34397)
vulnerability in gnome (CVE-2024-34397). Data can be tampered with by attackers.
CVE-2024-27004 Vulnerability in linux (CVE-2024-27004)
vulnerability in linux (CVE-2024-27004). Risk of unauthorized operations or information disclosure.
CVE-2024-27013 Vulnerability in linux (CVE-2024-27013)
vulnerability in linux (CVE-2024-27013). Risk of unauthorized operations or information disclosure.
CVE-2024-26988 Out-of-Bounds Write in c (CVE-2024-26988)
out-of-bounds write in c (CVE-2024-26988). Successful exploitation can lead to full system takeover.
CVE-2023-6246 Vulnerability in privilege-escalation (CVE-2023-6246)
vulnerability in privilege-escalation (CVE-2023-6246). Successful exploitation can lead to full system takeover.
CVE-2023-6779 Vulnerability in gnu (CVE-2023-6779)
vulnerability in gnu (CVE-2023-6779). Risk of unauthorized operations or information disclosure.
CVE-2023-6780 Vulnerability in gnu (CVE-2023-6780)
vulnerability in gnu (CVE-2023-6780). Risk of unauthorized operations or information disclosure.
CVE-2023-48795 Vulnerability in russh (CVE-2023-48795)
vulnerability in russh (CVE-2023-48795). Data can be tampered with by attackers. Mitigation: upgrade to `0.40.2` or later.
CVE-2023-46219 Vulnerability in haxx (CVE-2023-46219)
vulnerability in haxx (CVE-2023-46219). Risk of unauthorized operations or information disclosure.
CVE-2023-46218 Vulnerability in haxx (CVE-2023-46218)
vulnerability in haxx (CVE-2023-46218). Risk of unauthorized operations or information disclosure. Exploitable via ``curl.co.uk``.
CVE-2023-4911 KEV [KEV] Vulnerability in Gnu c (CVE-2023-4911)
vulnerability in Gnu c (CVE-2023-4911). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-38545 Out-of-Bounds Write in haxx (CVE-2023-38545)
out-of-bounds write in haxx (CVE-2023-38545). Successful exploitation can lead to full system takeover.
CVE-2023-44487 KEV [KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
CVE-2023-4527 Vulnerability in gnu (CVE-2023-4527)
vulnerability in gnu (CVE-2023-4527). Risk of unauthorized operations or information disclosure.
CVE-2023-4806 Use-After-Free in gnu (CVE-2023-4806)
vulnerability in gnu (CVE-2023-4806). Risk of unauthorized operations or information disclosure.
CVE-2023-27043 Vulnerability in fedoraproject (CVE-2023-27043)
vulnerability in fedoraproject (CVE-2023-27043). Risk of unauthorized operations or information disclosure.
CVE-2021-41617 Privilege Escalation in privilege-escalation (CVE-2021-41617)
vulnerability in privilege-escalation (CVE-2021-41617). Successful exploitation can lead to full system takeover.
CVE-2015-8008 Vulnerability in mediawiki (CVE-2015-8008)
vulnerability in mediawiki (CVE-2015-8008). Confidential information can be exposed externally.
CVE-2014-8119 Vulnerability in dos (CVE-2014-8119)
vulnerability in dos (CVE-2014-8119). Risk of unauthorized operations or information disclosure.
CVE-2014-4978 Vulnerability in c (CVE-2014-4978)
vulnerability in c (CVE-2014-4978). Data can be tampered with by attackers.
CVE-2017-16876 Cross-Site Scripting (XSS) in mistune-project (CVE-2017-16876)
cross-site scripting in mistune-project (CVE-2017-16876). Risk of unauthorized operations or information disclosure.
CVE-2017-16818 Vulnerability in dos (CVE-2017-16818)
vulnerability in dos (CVE-2017-16818). Risk of unauthorized operations or information disclosure.
CVE-2016-1254 Buffer Overflow in dos (CVE-2016-1254)
vulnerability in dos (CVE-2016-1254). Risk of unauthorized operations or information disclosure.
CVE-2015-5740 Vulnerability in golang (CVE-2015-5740)
vulnerability in golang (CVE-2015-5740). Successful exploitation can lead to full system takeover.
CVE-2015-5739 Vulnerability in golang (CVE-2015-5739)
vulnerability in golang (CVE-2015-5739). Successful exploitation can lead to full system takeover.
CVE-2015-7687 Use-After-Free in dos (CVE-2015-7687)
vulnerability in dos (CVE-2015-7687). Successful exploitation can lead to full system takeover.
CVE-2015-3229 Vulnerability in fedoraproject (CVE-2015-3229)
vulnerability in fedoraproject (CVE-2015-3229). Data can be tampered with by attackers.
CVE-2014-9092 Buffer Overflow in dos (CVE-2014-9092)
vulnerability in dos (CVE-2014-9092). Risk of unauthorized operations or information disclosure.
CVE-2015-0296 Vulnerability in tug (CVE-2015-0296)
vulnerability in tug (CVE-2015-0296). Data can be tampered with by attackers.
CVE-2017-13704 Vulnerability in canonical (CVE-2017-13704)
vulnerability in canonical (CVE-2017-13704). Risk of unauthorized operations or information disclosure.
CVE-2015-5070 Information Disclosure in cpp (CVE-2015-5070)
vulnerability in cpp (CVE-2015-5070). Risk of unauthorized operations or information disclosure.
CVE-2015-5069 Information Disclosure in cpp (CVE-2015-5069)
vulnerability in cpp (CVE-2015-5069). Risk of unauthorized operations or information disclosure.
CVE-2015-5704 Command Injection in devscripts-devel-team (CVE-2015-5704)
command injection in devscripts-devel-team (CVE-2015-5704). Successful exploitation can lead to full system takeover.
CVE-2017-12170 Vulnerability in pureftpd (CVE-2017-12170)
vulnerability in pureftpd (CVE-2017-12170). Successful exploitation can lead to full system takeover.
CVE-2015-5607 Cross-site request forgery in the REST API in IPython 2 and 3.
Cross-site request forgery in the REST API in IPython 2 and 3.
CVE-2015-1854 Vulnerability in fedoraproject (CVE-2015-1854)
vulnerability in fedoraproject (CVE-2015-1854). Data can be tampered with by attackers.
CVE-2015-3420 Vulnerability in c (CVE-2015-3420)
vulnerability in c (CVE-2015-3420). Risk of unauthorized operations or information disclosure.
CVE-2017-1002150 Open Redirect in csrf (CVE-2017-1002150)
vulnerability in csrf (CVE-2017-1002150). Risk of unauthorized operations or information disclosure.
CVE-2017-11462 Vulnerability in mit (CVE-2017-11462)
vulnerability in mit (CVE-2017-11462). Successful exploitation can lead to full system takeover.
CVE-2017-6362 Vulnerability in dos (CVE-2017-6362)
vulnerability in dos (CVE-2017-6362). Risk of unauthorized operations or information disclosure.
CVE-2015-5705 Vulnerability in devscripts-devel-team (CVE-2015-5705)
vulnerability in devscripts-devel-team (CVE-2015-5705). Data can be tampered with by attackers.
CVE-2017-13749 Vulnerability in c (CVE-2017-13749)
vulnerability in c (CVE-2017-13749). Risk of unauthorized operations or information disclosure.
CVE-2017-13751 Vulnerability in c (CVE-2017-13751)
vulnerability in c (CVE-2017-13751). Risk of unauthorized operations or information disclosure.
CVE-2017-13750 Vulnerability in c (CVE-2017-13750)
vulnerability in c (CVE-2017-13750). Risk of unauthorized operations or information disclosure.
CVE-2017-13752 Vulnerability in c (CVE-2017-13752)
vulnerability in c (CVE-2017-13752). Risk of unauthorized operations or information disclosure.
CVE-2017-13746 Vulnerability in c (CVE-2017-13746)
vulnerability in c (CVE-2017-13746). Risk of unauthorized operations or information disclosure.
CVE-2017-13747 Vulnerability in c (CVE-2017-13747)
vulnerability in c (CVE-2017-13747). Risk of unauthorized operations or information disclosure.
CVE-2017-13748 Vulnerability in c (CVE-2017-13748)
vulnerability in c (CVE-2017-13748). Risk of unauthorized operations or information disclosure.
CVE-2015-0233 Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.
CVE-2015-1395 Path Traversal in path-traversal (CVE-2015-1395)
path traversal in path-traversal (CVE-2015-1395). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →