FE
Product
Fedora
On CISA KEVExploited in the wildRansomware-linked
5,359
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch
Add Fedora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-32662 | 9.8 | Apr 23 | FreeRDP rdp_redirection_read_base64_wchar out of bound read Affected: 38; 39; 40 |
| CVE-2024-32659 | 9.8 | Apr 23 | freerdp_image_copy out of bound read Affected: 38; 39; 40 |
| CVE-2024-32658 | 9.8 | Apr 23 | FreeRDP ExtractRunLengthRegular* out of bound read Affected: 38; 39; 40 |
| CVE-2024-32460 | 9.8 | Apr 22 | FreeRDP Out-Of-Bounds Read in interleaved_decompress Affected: 38; 39; 40 |
| CVE-2024-32459 | 9.8 | Apr 22 | FreeRDP Out-Of-Bounds Read in ncrush_decompress Affected: 38; 39; 40 |
| CVE-2024-32458 | 9.8 | Apr 22 | FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle Affected: 38; 39; 40 |
| CVE-2024-32041 | 9.8 | Apr 22 | FreeRDP OutOfBound Read in zgfx_decompress_segment Affected: 38; 39; 40 |
| CVE-2024-32040 | 9.8 | Apr 22 | FreeRDP vulnerable to integer underflow in nsc_rle_decode Affected: 38; 39; 40 |
| CVE-2024-32039 | 9.8 | Apr 22 | FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data Affected: 38; 39; 40 |
| CVE-2024-31581 | 9.8 | Apr 17 | FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c Affected: 38; 39; 40 |
| CVE-2024-3116 | 9.8 | Apr 4 | Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4 Affected: 39 |
| CVE-2024-3209 | 9.8 | Apr 2 | UPX bele.h get_ne64 heap-based overflow Affected: 38; 39; 40 |
| CVE-2024-22097 | 9.8 | Feb 20 | A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0 Affected: 40 |
| CVE-2024-23305 | 9.8 | Feb 20 | An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23809 | 9.8 | Feb 20 | A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-21795 | 9.8 | Feb 20 | A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-21812 | 9.8 | Feb 20 | An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23313 | 9.8 | Feb 20 | An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23310 | 9.8 | Feb 20 | A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-23606 | 9.8 | Feb 20 | An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) Affected: 40 |
| CVE-2024-1597 | 9.8 | Feb 19 | pgjdbc SQL Injection via line comment generation Affected: 40 |
| CVE-2024-1283 | 9.8 | Feb 6 | Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 38; 39 |
| CVE-2024-1284 | 9.8 | Feb 6 | Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 38; 39 |
| CVE-2024-0808 | 9.8 | Jan 23 | Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file Affected: 38; 39 |
| CVE-2023-6816 | 9.8 | Jan 18 | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer Affected: 39 |
| CVE-2023-6395 | 9.8 | Jan 16 | Mock: privilege escalation for users that can access mock configuration Affected: 38; 39 |
| CVE-2023-6879 | 9.8 | Dec 27 | heap buffer overflow in libaom Affected: 38; 39 |
| CVE-2023-46850 | 9.8 | Nov 11 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer Affected: 39 |
| CVE-2023-5550 | 9.8 | Nov 9 | Moodle: rce due to lfi risk in some misconfigured shared hosting environments Affected: 38 |
| CVE-2023-3961 | 9.8 | Nov 3 | Samba: smbd allows client access to unix domain sockets on the file system as root Affected: 39 |
| CVE-2023-39332 | 9.8 | Oct 18 | Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects Affected: 39 |
| CVE-2023-38545 | 9.8 | Oct 18 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake Affected: 37 |
| CVE-2023-45239 | 9.8 | Oct 6 | A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr,… Affected: 39 |
| CVE-2023-39361 | 9.8 | Sep 5 | Unauthenticated SQL Injection in graph_view.php in Cacti Affected: 37; 38 |
| CVE-2023-36328 | 9.8 | Sep 1 | Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a… Affected: 37; 38; 39 |
| CVE-2023-40567 | 9.8 | Aug 31 | Out-Of-Bounds Write in FreeRDP Affected: 37; 38; 39 |
| CVE-2023-40569 | 9.8 | Aug 31 | Out-Of-Bounds Write in FreeRDP Affected: 37; 38; 39 |
| CVE-2023-40186 | 9.8 | Aug 31 | IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP Affected: 37; 38; 39 |
| CVE-2023-39352 | 9.8 | Aug 31 | Invalid offset validation leading to Out Of Bound Write in FreeRDP Affected: 37; 38; 39 |
| CVE-2023-4322 | 9.8 | Aug 14 | Heap-based Buffer Overflow in radareorg/radare2 Affected: 37; 38 |
| CVE-2023-3824 | 9.8 | Aug 11 | Buffer overflow and overread in phar_dir_read() Affected: 38 |
| CVE-2023-37920 | 9.8 | Jul 25 | Certifi's removal of e-Tugra root certificate Affected: 38 |
| CVE-2023-38408 | 9.8 | Jul 20 | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an… Affected: 37; 38 |
| CVE-2023-29405 | 9.8 | Jun 8 | Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go Affected: 38 |
| CVE-2023-29404 | 9.8 | Jun 8 | Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go Affected: 38 |
| CVE-2023-29402 | 9.8 | Jun 8 | Code injection via go command with cgo in cmd/go Affected: 38 |
| CVE-2023-34152 | 9.8 | May 30 | A vulnerability was found in ImageMagick Affected: 37; 38 |
| CVE-2023-31047 | 9.8 | May 7 | In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files Affected: 38 |
| CVE-2023-29141 | 9.8 | Mar 31 | An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3 Affected: 37 |
| CVE-2023-28333 | 9.8 | Mar 23 | Moodle: pix helper potential mustache code injection risk Affected: 36 |
The 500 most important CVEs for this product (exploited first, then by severity)
