Fedoraproject

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-1675 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 21, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-1674 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 21, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-1673 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 21, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium securi...Show more Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)Show less
CVE-2024-1672 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 21, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-1670 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 21, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-1669 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Feb 21, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2024-23809 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vdhr file can lead to arbitrary code execu...Show more A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-23606 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution....Show more An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-23313 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which...Show more An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-23310 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An att...Show more A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-23305 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vmrk file can lead to arbitrary code exe...Show more An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vmrk file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-22097 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution....Show more A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-21812 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which...Show more An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-21795 2Fedoraproject Libbiosig Project 2Fedora Libbiosig Jun 17, 2026 Feb 20, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .egi file can lead to arbitrary code execution....Show more A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .egi file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2024-26134 2Agronholm Fedoraproject 2Cbor2 Fedora Jun 17, 2026 Feb 19, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2...Show more cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue.Show less
CVE-2024-25983 2Fedoraproject Moodle 2Fedora Moodle Jun 17, 2026 Feb 19, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).
CVE-2024-25982 2Fedoraproject Moodle 2Fedora Moodle Jun 17, 2026 Feb 19, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The link to update all installed language packs did not include the necessary token to prevent a CSRF risk.
CVE-2024-25981 2Fedoraproject Moodle 2Fedora Moodle Jun 17, 2026 Feb 19, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
CVE-2024-25980 2Fedoraproject Moodle 2Fedora Moodle Jun 17, 2026 Feb 19, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
CVE-2024-25979 2Fedoraproject Moodle 2Fedora Moodle Jun 17, 2026 Feb 19, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The URL parameters accepted by forum search were not limited to the allowed parameters.

Previous 1...141516...273 Next