FE
Product
Fedora
On CISA KEVExploited in the wildRansomware-linked
5,352
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch
Add Fedora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-32662 | 9.8 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32659 | 9.8 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32658 | 9.8 | Apr 23 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32460 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32459 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32458 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32041 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32040 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-32039 | 9.8 | Apr 22 | FreeRDP is a free implementation of the Remote Desktop Protocol Affected: 38; 39; 40 |
| CVE-2024-31581 | 9.8 | Apr 17 | FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c Affected: 38; 39; 40 |
| CVE-2024-3116 | 9.8 | Apr 4 | pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API Affected: 39 |
| CVE-2024-3209 | 9.8 | Apr 2 | A vulnerability was found in UPX up to 4.2.2 Affected: 38; 39; 40 |
| CVE-2024-23809 | 9.8 | Feb 20 | A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23606 | 9.8 | Feb 20 | An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23313 | 9.8 | Feb 20 | An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23310 | 9.8 | Feb 20 | A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23305 | 9.8 | Feb 20 | An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-22097 | 9.8 | Feb 20 | A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0 Affected: 40 |
| CVE-2024-21812 | 9.8 | Feb 20 | An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-21795 | 9.8 | Feb 20 | A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-1597 | 9.8 | Feb 19 | pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE Affected: 40 |
| CVE-2024-1284 | 9.8 | Feb 7 | Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 38; 39 |
| CVE-2024-1283 | 9.8 | Feb 7 | Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 38; 39 |
| CVE-2024-0808 | 9.8 | Jan 24 | Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file Affected: 38; 39 |
| CVE-2023-6816 | 9.8 | Jan 18 | A flaw was found in X.Org server Affected: 39 |
| CVE-2023-6395 | 9.8 | Jan 16 | The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges Affected: 38; 39 |
| CVE-2023-6879 | 9.8 | Dec 27 | Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc() Affected: 38; 39 |
| CVE-2023-46850 | 9.8 | Nov 11 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer Affected: 39 |
| CVE-2023-5550 | 9.8 | Nov 9 | In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the… Affected: 38 |
| CVE-2023-3961 | 9.8 | Nov 3 | A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory Affected: 39 |
| CVE-2023-39332 | 9.8 | Oct 18 | Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects Affected: 39 |
| CVE-2023-38545 | 9.8 | Oct 18 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake Affected: 37 |
| CVE-2023-45239 | 9.8 | Oct 6 | A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr,… Affected: 39 |
| CVE-2023-39361 | 9.8 | Sep 5 | Cacti is an open source operational monitoring and fault management framework Affected: 37; 38 |
| CVE-2023-36328 | 9.8 | Sep 1 | Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a… Affected: 37; 38; 39 |
| CVE-2023-40569 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 37; 38; 39 |
| CVE-2023-40567 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 37; 38; 39 |
| CVE-2023-40186 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 37; 38; 39 |
| CVE-2023-39352 | 9.8 | Aug 31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license Affected: 37; 38; 39 |
| CVE-2023-4322 | 9.8 | Aug 14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0 Affected: 37; 38 |
| CVE-2023-3824 | 9.8 | Aug 11 | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may… Affected: 38 |
| CVE-2023-37920 | 9.8 | Jul 25 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts Affected: 38 |
| CVE-2023-38408 | 9.8 | Jul 20 | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an… Affected: 37; 38 |
| CVE-2023-29405 | 9.8 | Jun 8 | The go command may execute arbitrary code at build time when using cgo Affected: 38 |
| CVE-2023-29404 | 9.8 | Jun 8 | The go command may execute arbitrary code at build time when using cgo Affected: 38 |
| CVE-2023-29402 | 9.8 | Jun 8 | The go command may generate unexpected code at build time when using cgo Affected: 38 |
| CVE-2023-34152 | 9.8 | May 30 | A vulnerability was found in ImageMagick Affected: 37; 38 |
| CVE-2023-31047 | 9.8 | May 7 | In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files Affected: 38 |
| CVE-2023-29141 | 9.8 | Mar 31 | An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3 Affected: 37 |
| CVE-2023-28333 | 9.8 | Mar 23 | The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core… Affected: 36 |
The 500 most important CVEs for this product (exploited first, then by severity)
