Fedora

fedora

Vendor: Fedoraproject • 5,353 CVEs

CVEs (5,353)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-35498 3Debian FedoraprojectOpenvswitch 3Debian Linux FedoraOpenvswitch Jun 17, 2026 Feb 11, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be to...Show more A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.Show less
CVE-2020-13578 2Fedoraproject Genivia 2Fedora Gsoap Jun 17, 2026 Feb 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger t...Show more A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2020-13577 2Fedoraproject Genivia 2Fedora Gsoap Jun 17, 2026 Feb 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger t...Show more A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2020-13576 2Fedoraproject Genivia 2Fedora Gsoap Jun 17, 2026 Feb 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigge...Show more A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2020-13575 2Fedoraproject Genivia 2Fedora Gsoap Jun 17, 2026 Feb 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger...Show more A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2020-13574 2Fedoraproject Genivia 2Fedora Gsoap Jun 17, 2026 Feb 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger t...Show more A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2021-0326 3Debian FedoraprojectGoogle 3Android Debian LinuxFedora Jun 17, 2026 Feb 10, 2021 N/A· v4 7.5 HIGH· v3 7.9 HIGH· v2 In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no addition...Show more In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525Show less
CVE-2021-27135 3Debian FedoraprojectInvisible Island 3Debian Linux FedoraXterm Jun 17, 2026 Feb 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.
CVE-2021-26937 3Debian FedoraprojectGnu 3Debian Linux FedoraScreen Jun 17, 2026 Feb 9, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence.
CVE-2021-21148 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Feb 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21147 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 9, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2021-21146 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 9, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21145 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21144 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVE-2021-21143 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 9, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVE-2021-21142 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 9, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-26925 2Fedoraproject Roundcube 2Fedora Webmail Jun 17, 2026 Feb 9, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVE-2020-36152 2Fedoraproject Symonics 2Fedora Libmysofa Jun 17, 2026 Feb 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA.
CVE-2020-36151 2Fedoraproject Symonics 2Fedora Libmysofa Jun 17, 2026 Feb 8, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block.
CVE-2020-36150 2Fedoraproject Symonics 2Fedora Libmysofa Jun 17, 2026 Feb 8, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block.

Previous 1...145146147...268 Next