Fedora

fedora

Vendor: Fedoraproject • 5,361 CVEs

CVEs (5,361)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-41990 4Debian FedoraprojectSiemens+1 more 206gk5615 0aa00 2aa2 Firmware 6gk5804 0ap00 2aa2 Firmware6gk5812 1aa00 2aa2 Firmware+17 more Jun 17, 2026 Oct 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an ini...Show more The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.Show less
CVE-2021-41611 2Fedoraproject Squid Cache 2Fedora Squid Jun 17, 2026 Oct 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server t...Show more An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be passed along to clients, allowing access to unsafe or hijacked services.Show less
CVE-2021-38562 3Bestpractical DebianFedoraproject 3Debian Linux FedoraRequest Tracker Jun 17, 2026 Oct 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.
CVE-2021-38297 2Fedoraproject Golang 2Fedora Go Jun 17, 2026 Oct 18, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.
CVE-2021-28021 3Debian FedoraprojectStb Project 3Debian Linux FedoraStb Jun 17, 2026 Oct 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.
CVE-2021-3875 2Fedoraproject Vim 2Fedora Vim Jun 17, 2026 Oct 15, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-41800 2Fedoraproject Mediawiki 2Fedora Mediawiki Jun 17, 2026 Oct 11, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter prot...Show more MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.Show less
CVE-2021-41799 2Fedoraproject Mediawiki 2Fedora Mediawiki Jun 17, 2026 Oct 11, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.
CVE-2021-41798 2Fedoraproject Mediawiki 2Fedora Mediawiki Jun 17, 2026 Oct 11, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.
CVE-2021-37976 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2021-37975 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37974 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37973 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-37972 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37971 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2021-37970 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37969 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file.
CVE-2021-37968 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-37967 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2021-37966 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Oct 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Previous 1...104105106...269 Next