← Back

Fedoraproject

fedoraproject

5,423 CVEs • 20 products

Products (20)

Click to collapse
Toggle
Fedora
fedora
5,353 CVEs
Extra Packages For Enterprise Linux
extra_packages_for_enterprise_linux
76 CVEs
389 Directory Server
389_directory_server
39 CVEs
Sssd
sssd
19 CVEs
Fedora Core
fedora_core
8 CVEs
Commons
commons
1 CVE
Coolkey
coolkey
1 CVE
Anaconda
anaconda
1 CVE
Crypto Utils
crypto-utils
1 CVE
Arm Installer
arm_installer
1 CVE
Fedmsg
fedmsg
1 CVE
389 Administration Server
389_administration_server
1 CVE
Python Fedora
python-fedora
1 CVE
Spin Kickstarts
spin-kickstarts
1 CVE
Sectool
sectool
1 CVE
Selinux Policy
selinux-policy
1 CVE
Supybot Fedora
supybot-fedora
1 CVE
Fedora Linux Kernel
fedora_linux_kernel
1 CVE
Unbound
unbound
1 CVE
Atomic
atomic
0 CVEs

CVEs (5,423)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41611
2Fedoraproject
Squid Cache
2Fedora
Squid
Jun 17, 2026
Oct 18, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server t...Show more
An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be passed along to clients, allowing access to unsafe or hijacked services.Show less
CVE-2021-38562
3Bestpractical
DebianFedoraproject
3Debian Linux
FedoraRequest Tracker
Jun 17, 2026
Oct 18, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.
CVE-2021-38297
2Fedoraproject
Golang
2Fedora
Go
Jun 17, 2026
Oct 18, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.
CVE-2021-28021
3Debian
FedoraprojectStb Project
3Debian Linux
FedoraStb
Jun 17, 2026
Oct 15, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.
CVE-2021-3875
2Fedoraproject
Vim
2Fedora
Vim
Jun 17, 2026
Oct 15, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-41800
2Fedoraproject
Mediawiki
2Fedora
Mediawiki
Jun 17, 2026
Oct 11, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter prot...Show more
MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.Show less
CVE-2021-41799
2Fedoraproject
Mediawiki
2Fedora
Mediawiki
Jun 17, 2026
Oct 11, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.
CVE-2021-41798
2Fedoraproject
Mediawiki
2Fedora
Mediawiki
Jun 17, 2026
Oct 11, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page.
CVE-2021-37976
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2021-37975
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37974
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37973
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-37972
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37971
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2021-37970
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37969
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file.
CVE-2021-37968
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-37967
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2021-37966
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2021-37965
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Oct 8, 2021
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page.