Fedora

CVEs (5,358)

• CVE-2022-31783MedJun 2, 2022
  Liblouis

  Liblouis
  risk 0.00cvss 5.5epss 0.01

  Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.

• CVE-2022-1942HigMay 31, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

• CVE-2022-1927HigMay 29, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Buffer Over-read in GitHub repository vim/vim prior to 8.2.

• CVE-2022-1897HigMay 27, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

• CVE-2022-1898HigMay 27, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Use After Free in GitHub repository vim/vim prior to 8.2.

• CVE-2022-26691MedMay 26, 2022
  Apple Inc.

  macOS
  risk 0.00cvss 6.7epss 0.01

  A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

• CVE-2022-1886HigMay 26, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

• CVE-2022-1851HigMay 25, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

• CVE-2022-1706MedMay 17, 2022
  Fedoraproject

  Fedora
  risk 0.00cvss 6.5epss 0.01

  A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is…

• CVE-2022-1769HigMay 17, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.00

  Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.

• CVE-2022-1733HigMay 17, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.

• CVE-2022-1587CriMay 16, 2022
  Pcre

  Pcre
  risk 0.00cvss 9.1epss 0.03

  An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

• CVE-2022-1586CriMay 16, 2022
  Pcre

  Pcre
  risk 0.00cvss 9.1epss 0.03

  An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was…

• CVE-2022-30767CriMay 16, 2022
  Github.com

  u-boot
  risk 0.00cvss 9.8epss 0.03

  nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.

• CVE-2022-1379CriMay 14, 2022
  Plantuml

  Plantuml
  risk 0.00cvss 9.1epss 0.02

  URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery (SSRF). This allows accessing restricted internal…

• CVE-2022-1674MedMay 12, 2022
  Vim

  Vim
  risk 0.00cvss 5.5epss 0.02

  NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.

• CVE-2022-1623MedMay 11, 2022
  LibTIFF

  Libtiff
  risk 0.00cvss 5.5epss 0.01

  LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

• CVE-2022-1622MedMay 11, 2022
  LibTIFF

  Libtiff
  risk 0.00cvss 5.5epss 0.02

  LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

• CVE-2022-1629HigMay 10, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution

• CVE-2022-1621HigMay 10, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution