Fedoraproject

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-45452 2Djangoproject Fedoraproject 2Django Fedora Jun 17, 2026 Jan 5, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.
CVE-2021-45116 2Djangoproject Fedoraproject 2Django Fedora Jun 17, 2026 Jan 5, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulne...Show more An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.Show less
CVE-2021-45115 2Djangoproject Fedoraproject 2Django Fedora Jun 17, 2026 Jan 5, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large...Show more An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack.Show less
CVE-2021-3842 3Debian FedoraprojectNltk 3Debian Linux FedoraNltk Jun 17, 2026 Jan 4, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 nltk is vulnerable to Inefficient Regular Expression Complexity
CVE-2021-41819 6Debian FedoraprojectOpensuse+3 more 9Cgi Debian LinuxEnterprise Linux+6 more Jun 17, 2026 Jan 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41817 6Debian FedoraprojectOpensuse+3 more 9Date Debian LinuxEnterprise Linux+6 more Jun 17, 2026 Jan 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVE-2021-45943 4Debian FedoraprojectOracle+1 more 4Debian Linux FedoraGdal+1 more Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment).
CVE-2021-45942 3Debian FedoraprojectOpenexr 3Debian Linux FedoraOpenexr Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2...Show more OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.Show less
CVE-2021-45931 2Fedoraproject Harfbuzz Project 2Fedora Harfbuzz Jun 17, 2026 Jan 1, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy).
CVE-2021-45930 3Debian FedoraprojectQt 3Debian Linux FedoraQtsvg Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
CVE-2021-45958 3Debian FedoraprojectUltrajson Project 3Debian Linux FedoraUltrajson Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.
CVE-2021-4193 4Apple DebianFedoraproject+1 more 5Debian Linux FedoraMac Os X+2 more Jun 17, 2026 Dec 31, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 vim is vulnerable to Out-of-bounds Read
CVE-2021-4192 4Apple DebianFedoraproject+1 more 5Debian Linux FedoraMac Os X+2 more Jun 17, 2026 Dec 31, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free
CVE-2021-4190 2Fedoraproject Wireshark 2Fedora Wireshark Jun 17, 2026 Dec 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file
CVE-2021-4186 2Fedoraproject Wireshark 2Fedora Wireshark Jun 17, 2026 Dec 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4185 4Debian FedoraprojectOracle+1 more 5Debian Linux FedoraHttp Server+2 more Jun 17, 2026 Dec 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4184 4Debian FedoraprojectOracle+1 more 5Debian Linux FedoraHttp Server+2 more Jun 17, 2026 Dec 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4183 3Fedoraproject OracleWireshark 4Fedora Http ServerWireshark+1 more Jun 17, 2026 Dec 30, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
CVE-2021-4182 3Fedoraproject OracleWireshark 4Fedora Http ServerWireshark+1 more Jun 17, 2026 Dec 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4181 4Debian FedoraprojectOracle+1 more 5Debian Linux FedoraHttp Server+2 more Jun 17, 2026 Dec 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Previous 1...939495...272 Next