FE
Product
Fedora
by Fedoraproject · last CVE Jun 13, 2026
On CISA KEVExploited in the wildRansomware-linked
5,352
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch

Add Fedora to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32662
9.8
1%
Apr 23
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32659
9.8
1%
Apr 23
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32658
9.8
1%
Apr 23
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32460
9.8
2%
Apr 22
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32459
9.8
4%
Apr 22
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32458
9.8
2%
Apr 22
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32041
9.8
2%
Apr 22
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32040
9.8
2%
Apr 22
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-32039
9.8
2%
Apr 22
FreeRDP is a free implementation of the Remote Desktop Protocol
Affected: 38; 39; 40
CVE-2024-31581
9.8
1%
Apr 17
FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c
Affected: 38; 39; 40
CVE-2024-3116
9.8
66%
Apr 4
pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API
Affected: 39
CVE-2024-3209
9.8
1%
Apr 2
A vulnerability was found in UPX up to 4.2.2
Affected: 38; 39; 40
CVE-2024-23809
9.8
2%
Feb 20
A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23606
9.8
2%
Feb 20
An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23313
9.8
2%
Feb 20
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23310
9.8
2%
Feb 20
A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-23305
9.8
2%
Feb 20
An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-22097
9.8
2%
Feb 20
A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0
Affected: 40
CVE-2024-21812
9.8
2%
Feb 20
An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-21795
9.8
2%
Feb 20
A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
Affected: 40
CVE-2024-1597
9.8
5%
Feb 19
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE
Affected: 40
CVE-2024-1284
9.8
1%
Feb 7
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 38; 39
CVE-2024-1283
9.8
22%
Feb 7
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 38; 39
CVE-2024-0808
9.8
1%
Jan 24
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file
Affected: 38; 39
CVE-2023-6816
9.8
2%
Jan 18
A flaw was found in X.Org server
Affected: 39
CVE-2023-6395
9.8
2%
Jan 16
The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges
Affected: 38; 39
CVE-2023-6879
9.8
1%
Dec 27
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc()
Affected: 38; 39
CVE-2023-46850
9.8
2%
Nov 11
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer
Affected: 39
CVE-2023-5550
9.8
2%
Nov 9
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the…
Affected: 38
CVE-2023-3961
9.8
3%
Nov 3
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
Affected: 39
CVE-2023-39332
9.8
2%
Oct 18
Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects
Affected: 39
CVE-2023-38545
9.8
79%
Oct 18
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake
Affected: 37
CVE-2023-45239
9.8
2%
Oct 6
A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr,…
Affected: 39
CVE-2023-39361
9.8
89%
Sep 5
Cacti is an open source operational monitoring and fault management framework
Affected: 37; 38
CVE-2023-36328
9.8
1%
Sep 1
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a…
Affected: 37; 38; 39
CVE-2023-40569
9.8
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 37; 38; 39
CVE-2023-40567
9.8
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 37; 38; 39
CVE-2023-40186
9.8
1%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 37; 38; 39
CVE-2023-39352
9.8
2%
Aug 31
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license
Affected: 37; 38; 39
CVE-2023-4322
9.8
1%
Aug 14
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0
Affected: 37; 38
CVE-2023-3824
9.8
22%
Aug 11
In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may…
Affected: 38
CVE-2023-37920
9.8
1%
Jul 25
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts
Affected: 38
CVE-2023-38408
9.8
80%
Jul 20
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…
Affected: 37; 38
CVE-2023-29405
9.8
2%
Jun 8
The go command may execute arbitrary code at build time when using cgo
Affected: 38
CVE-2023-29404
9.8
2%
Jun 8
The go command may execute arbitrary code at build time when using cgo
Affected: 38
CVE-2023-29402
9.8
2%
Jun 8
The go command may generate unexpected code at build time when using cgo
Affected: 38
CVE-2023-34152
9.8
8%
May 30
A vulnerability was found in ImageMagick
Affected: 37; 38
CVE-2023-31047
9.8
1%
May 7
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files
Affected: 38
CVE-2023-29141
9.8
1%
Mar 31
An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3
Affected: 37
CVE-2023-28333
9.8
1%
Mar 23
The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core…
Affected: 36
Page 3 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)