Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Fedora
MEDIUM 5.5
MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console
Fedora
MEDIUM 6.5
A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to t…
Fedora
MEDIUM 5.4
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password …
Fedora
MEDIUM 5.9
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perfo…
Fedora
CRITICAL 9.8
An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.
Fedora
HIGH 7.8
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Fedora
MEDIUM 6.1
A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related t…
Fedora
CRITICAL 9.8
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent,…
Fedora
HIGH 8.1
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to s…
Fedora
HIGH 8.8
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can ca…
Fedora
HIGH 7.5
The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regu…
Fedora
CRITICAL 9.8
An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parse…
Fedora
MEDIUM 6.5
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no addi…
Fedora
MEDIUM 6.5
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional e…
Fedora
HIGH 8.8
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media conten…
Fedora
MEDIUM 5.3
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, …
Fedora
HIGH 7.5
A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the…
Fedora
MEDIUM 5.3
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.
Fedora
MEDIUM 5.5
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed.…
Fedora
MEDIUM 6.5
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
Fedora
CRITICAL 9.8
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
Fedora
CRITICAL 9.8
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Fedora
CRITICAL 9.8
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a…
Fedora
MEDIUM 6.5
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.
Fedora
HIGH 7.5
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
Fedora
MEDIUM 5.5
sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.
Fedora
HIGH 7.5
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 admin…
Fedora
CRITICAL 9.8
mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or m…
Fedora
HIGH 8.8
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote co…
Fedora
HIGH 7.4
Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.