Fedora

CVEs (5,359)

• CVE-2022-0417HigFeb 1, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.

• CVE-2022-0419MedFeb 1, 2022
  Radare

  Radare2
  risk 0.00cvss 5.5epss 0.01

  NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.

• CVE-2022-0413HigJan 30, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Use After Free in GitHub repository vim/vim prior to 8.2.

• CVE-2022-0408HigJan 30, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

• CVE-2022-24122HigJan 29, 2022
  Linux

  Kernel
  risk 0.00cvss 7.8epss 0.01

  kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.

• CVE-2022-0393HigJan 28, 2022
  Vim

  Vim
  risk 0.00cvss 7.1epss 0.01

  Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

• CVE-2022-23990HigJan 26, 2022
  Libexpat Project

  Libexpat
  risk 0.00cvss 7.5epss 0.04

  Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

• CVE-2022-21658HigJan 20, 2022
  Apple Inc.

  macOS
  risk 0.00cvss 7.3epss 0.01

  Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling…

• CVE-2022-0238MedJan 16, 2022
  Fedoraproject

  Fedora
  risk 0.00cvss 4.3epss 0.01

  phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

• CVE-2021-46022MedJan 14, 2022
  GNU

  Recutils
  risk 0.00cvss 5.5epss 0.01

  An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.

• CVE-2021-46019MedJan 14, 2022
  GNU

  Recutils
  risk 0.00cvss 5.5epss 0.01

  An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.

• CVE-2022-23222HigJan 14, 2022
  Linux

  Kernel
  risk 0.00cvss 7.8epss 0.02

  kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.

• CVE-2022-21682HigJan 13, 2022
  Flatpak

  Flatpak
  risk 0.00cvss 7.7epss 0.02

  Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have the full access that…

• CVE-2022-0197HigJan 13, 2022
  Fedoraproject

  Fedora
  risk 0.00cvss 8.8epss 0.01

  phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

• CVE-2022-0196HigJan 13, 2022
  Fedoraproject

  Fedora
  risk 0.00cvss 8.8epss 0.01

  phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

• CVE-2022-0173MedJan 11, 2022
  Radare

  Radare2
  risk 0.00cvss 5.5epss 0.01

  radare2 is vulnerable to Out-of-bounds Read

• CVE-2022-0158LowJan 10, 2022
  Vim

  Vim
  risk 0.00cvss 3.3epss 0.02

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2022-0157MedJan 10, 2022
  Fedoraproject

  Fedora
  risk 0.00cvss 5.4epss 0.01

  phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

• CVE-2022-0156MedJan 10, 2022
  Vim

  Vim
  risk 0.00cvss 5.5epss 0.02

  vim is vulnerable to Use After Free

• CVE-2021-46142MedJan 6, 2022
  Uriparser

  Uriparser
  risk 0.00cvss 5.5epss 0.01

  An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.