Fedoraproject

Fedora

5319 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-4190

Exploit
  • EPSS 0.18%
  • Published 30.12.2021 22:15:10
  • Last modified 03.11.2025 22:15:54

Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file

7.5

CVE-2021-23727

Exploit
  • EPSS 1.15%
  • Published 29.12.2021 17:15:07
  • Last modified 21.11.2024 05:51:52

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or some...

7.8

CVE-2021-4187

Exploit
  • EPSS 0.23%
  • Published 29.12.2021 17:15:07
  • Last modified 03.11.2025 21:15:48

vim is vulnerable to Use After Free

8.5

CVE-2021-44832

Warning
  • EPSS 35.23%
  • Published 28.12.2021 20:15:08
  • Last modified 21.11.2024 06:31:34

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has ...

7.8

CVE-2021-4173

Exploit
  • EPSS 0.18%
  • Published 27.12.2021 13:15:07
  • Last modified 03.11.2025 21:15:47

vim is vulnerable to Use After Free

7.1

CVE-2021-4166

Exploit
  • EPSS 0.22%
  • Published 25.12.2021 19:15:07
  • Last modified 21.11.2024 06:37:03

vim is vulnerable to Out-of-bounds Read

5.3

CVE-2021-45471

  • EPSS 0.31%
  • Published 24.12.2021 02:15:07
  • Last modified 21.11.2024 06:32:16

In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.

6.1

CVE-2021-45472

  • EPSS 0.26%
  • Published 24.12.2021 02:15:07
  • Last modified 21.11.2024 06:32:16

In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution marker, and the javascript: URL scheme (among others) can be used.

6.1

CVE-2021-45473

Exploit
  • EPSS 0.33%
  • Published 24.12.2021 02:15:07
  • Last modified 21.11.2024 06:32:17

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL (aka a page-information sidebar).

6.1

CVE-2021-45474

  • EPSS 0.26%
  • Published 24.12.2021 02:15:07
  • Last modified 21.11.2024 06:32:17

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.