FE
Product
Fedora
On CISA KEVExploited in the wildRansomware-linked
5,352
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch
Add Fedora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21166 In wildKEV | 8.8 | Mar 9 | Google Chromium Race Condition Vulnerability Affected: 32; 33; 34 |
| CVE-2021-21148 In wildKEV | 8.8 | Feb 9 | Google Chromium V8 Heap Buffer Overflow Vulnerability Affected: 32; 33 |
| CVE-2020-13671 In wildKEV | 8.8 | Nov 20 | Drupal core Un-restricted Upload of File Affected: 32; 33 |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: 32; 33 |
| CVE-2020-6418 In wildKEV | 8.8 | Feb 27 | Google Chromium V8 Type Confusion Vulnerability Affected: 30; 31 |
| CVE-2021-39144 In wildKEV | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack Affected: 33; 34; 35 |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: 39 |
| CVE-2023-7101 In wildKEV | 7.8 | Dec 24 | Arbitrary Code Execution (ACE) Vulnerability Affected: 38; 39 |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 37; 38; 39 |
| CVE-2022-0995 In wildKEV | 7.8 | Mar 25 | Linux Kernel Out-of-Bounds Write Vulnerability Affected: 35 |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 35 |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: 35 |
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: 34; 35 |
| CVE-2021-22204 In wildKEV | 7.8 | Apr 23 | ExifTool Remote Code Execution Vulnerability Affected: 32; 33; 34 |
| CVE-2021-3156 In wildKEV | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability Affected: 32; 33 |
| CVE-2020-28949 In wildKEV | 7.8 | Nov 19 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Affected: 32; 33; 34; 35 |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: 29 |
| CVE-2019-0211 In wildKEV | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability Affected: 28; 29; 30 |
| CVE-2023-38180 In wildKEV | 7.5 | Aug 8 | .NET and Visual Studio Denial of Service Vulnerability Affected: 37; 38 |
| CVE-2020-36193 In wildKEV | 7.5 | Jan 18 | PEAR Archive_Tar Improper Link Resolution Vulnerability Affected: 32; 33; 34; 35 |
| CVE-2019-5418 In wildKEV | 7.5 | Mar 27 | Rails Ruby on Rails Path Traversal Vulnerability Affected: 30 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 21; 22 |
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 19; 20 |
| CVE-2021-39226 In wildKEV | 7.3 | Oct 5 | Snapshot authentication bypass in grafana Affected: 34; 35 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 23; 24; 25 |
| CVE-2023-42916 In wildKEV | 6.5 | Nov 30 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: 38; 39 |
| CVE-2022-2856 In wildKEV | 6.5 | Sep 26 | Google Chromium Intents Insufficient Input Validation Vulnerability Affected: 37 |
| CVE-2021-37976 In wildKEV | 6.5 | Oct 8 | Google Chromium Information Disclosure Vulnerability Affected: 33; 34; 35 |
| CVE-2021-30533 In wildKEV | 6.5 | Jun 7 | Google Chromium PopupBlocker Security Bypass Vulnerability Affected: 33; 34 |
| CVE-2021-38000 In wildKEV | 6.1 | Nov 23 | Google Chromium Intents Improper Input Validation Vulnerability Affected: 34 |
| CVE-2020-35730 In wildKEV | 6.1 | Dec 28 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: 32; 33 |
| CVE-2020-13965 In wildKEV | 6.1 | Jun 9 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: 31; 32 |
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 31; 32; 33 |
| CVE-2020-1472 RansomwareIn wildKEV | 5.5 | Aug 17 | Netlogon Elevation of Privilege Vulnerability Affected: 31; 32; 33 |
| CVE-2023-5631 In wildKEV | 5.4 | Oct 18 | Stored XSS vulnerability in Roundcube Affected: 39 |
| CVE-2022-23134 In wildKEV | 5.3 | Jan 13 | Possible view of the setup pages by unauthenticated users if config file already exists Affected: 34; 35 |
| CVE-2023-20867 In wildKEV | 3.9 | Jun 13 | VMware Tools Authentication Bypass Vulnerability Affected: 37; 38; 39 |
| CVE-2024-24576 | 10.0 | Apr 9 | Rust is a programming language Affected: 38; 39; 40 |
| CVE-2023-3432 | 10.0 | Jun 27 | Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9 Affected: 39 |
| CVE-2021-41556 | 10.0 | Jul 28 | sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution Affected: 35; 36 |
| CVE-2022-30292 | 10.0 | May 4 | Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call Affected: 35; 36 |
| CVE-2020-13753 | 10.0 | Jul 14 | The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl Affected: 31 |
| CVE-2024-2044 | 9.9 | Mar 7 | pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code Affected: 40 |
| CVE-2021-3781 | 9.9 | Feb 16 | A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command Affected: 34 |
| CVE-2021-21345 | 9.9 | Mar 22 | XStream is vulnerable to a Remote Command Execution attack Affected: 33; 34; 35 |
| CVE-2024-36048 | 9.8 | May 18 | QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to… Affected: 39; 40 |
| CVE-2024-34502 | 9.8 | May 5 | An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1 Affected: 40 |
| CVE-2023-47212 | 9.8 | May 1 | A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22 Affected: 38; 39; 40 |
| CVE-2024-22391 | 9.8 | Apr 25 | A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23 Affected: 38; 39; 40 |
| CVE-2024-22373 | 9.8 | Apr 25 | An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23 Affected: 38; 39; 40 |
The 500 most important CVEs for this product (exploited first, then by severity)
