What’s Vulnerable › Products
Fedoraproject Fedora vulnerabilities
5363 known vulnerabilities, 88 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Fedoraproject Fedora version is affected
Exploited Fedoraproject Fedora vulnerabilities
- CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
- CVE-2015-3306 — ProFTPD Improper Access Control Vulnerability
- CVE-2022-0995 — Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability
- CVE-2021-30952 — Apple Multiple Products Integer Overflow or Wraparound Vulnerability
- CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability
- CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability
- CVE-2020-13965 — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
- CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability
- CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability
- CVE-2024-5274 — Google Chromium V8 Type Confusion Vulnerability
- CVE-2024-4947 — Google Chromium V8 Type Confusion Vulnerability
- CVE-2024-4761 — Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
- CVE-2024-4671 — Google Chromium Visuals Use-After-Free Vulnerability
- CVE-2023-4762 — Google Chromium V8 Type Confusion Vulnerability
- CVE-2024-0519 — Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
- CVE-2023-7101 — Spreadsheet::ParseExcel Remote Code Execution Vulnerability
- CVE-2023-7024 — Google Chromium WebRTC Heap Buffer Overflow Vulnerability
- CVE-2023-42917 — Apple Multiple Products WebKit Memory Corruption Vulnerability
- CVE-2023-42916 — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
- CVE-2023-6345 — Google Skia Integer Overflow Vulnerability
- CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability
- CVE-2023-5631 — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
- CVE-2023-5217 — Google Chromium libvpx Heap Buffer Overflow Vulnerability
Latest Fedoraproject Fedora vulnerabilities
- CVE-2026-54231 — Abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVSS 5.5)
- CVE-2026-54230 — Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVSS 7.8)
- CVE-2026-35094 — Libinput: libinput: information disclosure via dangling pointer in lua plugin handling (CVSS 5.5)
- CVE-2026-35093 — Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins (CVSS 8.8)
- CVE-2023-4134 — Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() (CVSS 5.5)
- CVE-2024-3056 — Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack (CVSS 7.7)
- CVE-2024-6293 — (CVSS 8.8)
- CVE-2024-6292 — (CVSS 8.8)
- CVE-2024-6291 — (CVSS 8.8)
- CVE-2024-6290 — (CVSS 8.8)
- CVE-2024-38277 — moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys (CVSS 5.4)
- CVE-2024-38276 — moodle: CSRF risks due to misuse of confirm_sesskey (CVSS 8.8)
- CVE-2024-38274 — moodle: stored XSS via calendar's event title when deleting the event (CVSS 6.1)
- CVE-2024-38273 — moodle: BigBlueButton web service leaks meeting joining information to users who should not have access (CVSS 5.4)
- CVE-2024-5847 — (CVSS 8.8)
- CVE-2024-5846 — (CVSS 8.8)
- CVE-2024-5845 — (CVSS 8.8)
- CVE-2024-5844 — (CVSS 8.8)
- CVE-2024-5843 — (CVSS 6.5)
- CVE-2024-5842 — (CVSS 8.8)
- CVE-2024-5841 — (CVSS 8.8)
- CVE-2024-5840 — (CVSS 6.5)
- CVE-2024-5839 — (CVSS 6.5)
- CVE-2024-5838 — (CVSS 8.8)
- CVE-2024-5837 — (CVSS 8.8)