Fedora

CVEs (5,358)

• CVE-2022-37451HigAug 6, 2022
  Exim

  Exim
  risk 0.00cvss 7.5epss 0.03

  Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc.

• CVE-2022-2553MedJul 28, 2022
  Clusterlabs

  Booth
  risk 0.00cvss 6.5epss 0.01

  The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

• CVE-2022-35653MedJul 25, 2022
  Moodle

  Moodle
  risk 0.00cvss 6.1epss 0.04

  A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script…

• CVE-2022-35651MedJul 25, 2022
  Moodle

  Moodle
  risk 0.00cvss 6.1epss 0.01

  A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's…

• CVE-2021-46829HigJul 24, 2022
  GNOME Foundation

  Gdkpixbuf
  risk 0.00cvss 7.8epss 0.01

  GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit…

• CVE-2022-32323HigJul 14, 2022
  Autotrace Project

  Autotrace
  risk 0.00cvss 7.3epss 0.01

  AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

• CVE-2022-2345HigJul 8, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Use After Free in GitHub repository vim/vim prior to 9.0.0046.

• CVE-2022-2344HigJul 8, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

• CVE-2022-2343HigJul 8, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.

• CVE-2022-2304HigJul 5, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2289HigJul 3, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Use After Free in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2288HigJul 3, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2287HigJul 2, 2022
  Vim

  Vim
  risk 0.00cvss 7.1epss 0.01

  Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2286HigJul 2, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2285HigJul 2, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2284HigJul 2, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

• CVE-2022-33099HigJul 1, 2022
  Lua

  Lua
  risk 0.00cvss 7.5epss 0.03

  An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.

• CVE-2022-2264HigJul 1, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2257HigJun 30, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.

• CVE-2022-2231MedJun 28, 2022
  Vim

  Vim
  risk 0.00cvss 5.5epss 0.01

  NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.