Browse CVEs

HIGH 7.8 CVE-2026-54230 A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell … Fedora Mitigation only Fix from $1,9502026-06-13 MEDIUM 5.5 CVE-2026-54231 A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal … Fedora Mitigation only Fix from $1,6002026-06-13 MEDIUM 5.5 CVE-2026-35094 A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can exploit a dangling pointer vulner… Fedora Mitigation only Fix from $1,6002026-04-01 CRITICAL 9.8 CVE-2023-47212 A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an o… Fedora No fix yet Fix from $2,3002024-05-01 CRITICAL 9.8 CVE-2024-22391 A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially c… Fedora No fix yet Fix from $2,3002024-04-25 MEDIUM 6.5 CVE-2024-25569 An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafte… Fedora No fix yet Fix from $1,6002024-04-25 CRITICAL 9.8 CVE-2024-22373 An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A … Fedora No fix yet Fix from $2,3002024-04-25 HIGH 8.0 CVE-2023-51795 Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showspectrum.… Fedora Mitigation only Fix from $1,9502024-04-19 HIGH 7.8 CVE-2023-51791 Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxl_parser.c in… Fedora Mitigation only Fix from $1,9502024-04-19 MEDIUM 6.7 CVE-2023-51797 Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showwaves.c:7… Fedora Mitigation only Fix from $1,6002024-04-19 HIGH 8.0 CVE-2023-49501 Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in t… Fedora No fix yet Fix from $1,9502024-04-19 HIGH 7.5 CVE-2024-31031 An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflo… Fedora No fix yet Fix from $1,9502024-04-17 HIGH 8.0 CVE-2023-49528 Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service (… Fedora No fix yet Fix from $1,9502024-04-12 MEDIUM 6.5 CVE-2023-43279 Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite comman… Fedora No fix yet Fix from $1,6002024-03-12 MEDIUM 5.5 CVE-2024-24246 Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_pt… Fedora No fix yet Fix from $1,6002024-02-29 HIGH 7.5 CVE-2024-27507 libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp. Fedora No fix yet Fix from $1,9502024-02-27 CRITICAL 9.8 CVE-2024-23809 A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-23310 A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A spe… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-23313 An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-23606 An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111).… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-21795 A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-21812 An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A … Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-22097 A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-23305 An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (a… Fedora No fix yet Fix from $2,3002024-02-20 HIGH 7.8 CVE-2024-0409 A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits… Fedora Mitigation only Fix from $1,9502024-01-18 MEDIUM 5.5 CVE-2024-0408 A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the clien… Fedora Mitigation only Fix from $1,6002024-01-18 MEDIUM 6.5 CVE-2023-5455 A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to tri… Fedora Mitigation only Fix from $1,6002024-01-10 HIGH 7.0 CVE-2023-51767 OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of aut… Fedora Mitigation only Fix from $1,9502023-12-24 MEDIUM 5.5 CVE-2023-4256 Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. Th… Fedora No fix yet Fix from $1,6002023-12-21 HIGH 8.8 CVE-2023-39357 Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was discovered. When the column type… Fedora No fix yet Fix from $1,9502023-09-05