Browse CVEs

HIGH 7.5 CVE-2021-21996 An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access … Fedora 3000.3+ Fix from $1,9502021-09-08 MEDIUM 6.4 CVE-2021-22004 An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that f… Fedora 3000.3+ Fix from $1,6002021-09-08 HIGH 7.5 CVE-2020-19752 The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference. Fedora Patch available Fix from $1,9502021-09-07 MEDIUM 5.9 CVE-2021-40529 The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction … Fedora 91.12.0+ Fix from $1,6002021-09-06 MEDIUM 5.9 CVE-2021-40530 The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certa… Fedora after 8.5 Fix from $1,6002021-09-06 HIGH 7.8 CVE-2021-3770 vim is vulnerable to Heap-based Buffer Overflow Fedora 8.2.3408+ Fix from $1,9502021-09-06 HIGH 8.8 CVE-2021-30623 Chromium: CVE-2021-30623 Use after free in Bookmarks Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30624 Chromium: CVE-2021-30624 Use after free in Autofill Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30606 Chromium: CVE-2021-30606 Use after free in Blink Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30607 Chromium: CVE-2021-30607 Use after free in Permissions Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30608 Chromium: CVE-2021-30608 Use after free in Web Share Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30609 Chromium: CVE-2021-30609 Use after free in Sign-In Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30610 Chromium: CVE-2021-30610 Use after free in Extensions API Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30611 Chromium: CVE-2021-30611 Use after free in WebRTC Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30612 Chromium: CVE-2021-30612 Use after free in WebRTC Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30613 Chromium: CVE-2021-30613 Use after free in Base internals Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30614 Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30616 Chromium: CVE-2021-30616 Use after free in Media Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30618 Chromium: CVE-2021-30618 Inappropriate implementation in DevTools Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30620 Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 HIGH 8.8 CVE-2021-30622 Chromium: CVE-2021-30622 Use after free in WebApp Installs Fedora after 93.0.4577.63 Fix from $1,9502021-09-03 MEDIUM 6.5 CVE-2021-30615EPSS 6% Chromium: CVE-2021-30615 Cross-origin data leak in Navigation Fedora after 93.0.4577.63 Fix from $1,6002021-09-03 MEDIUM 6.5 CVE-2021-30617 Chromium: CVE-2021-30617 Policy bypass in Blink Fedora after 93.0.4577.63 Fix from $1,6002021-09-03 MEDIUM 6.5 CVE-2021-30619 Chromium: CVE-2021-30619 UI Spoofing in Autofill Fedora after 93.0.4577.63 Fix from $1,6002021-09-03 MEDIUM 6.5 CVE-2021-30621 Chromium: CVE-2021-30621 UI Spoofing in Autofill Fedora after 93.0.4577.63 Fix from $1,6002021-09-03 MEDIUM 6.1 CVE-2021-39191 mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenti… Fedora 2.4.9.4+ Fix from $1,6002021-09-03 HIGH 7.5 CVE-2021-33582 Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-t… Fedora 3.0.16 / 3.2.8+ Fix from $1,9502021-09-01 MEDIUM 5.3 CVE-2021-34434 In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is … Fedora after 2.0.11 Fix from $1,6002021-08-30 MEDIUM 5.9 CVE-2021-39272 Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. Fedora 6.4.22+ Fix from $1,6002021-08-30 HIGH 7.8 CVE-2021-28697 grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority o… Fedora after 4.15.0 Fix from $1,9502021-08-27