30 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2020-12770			2020-05-09	2020-07-29	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
2	CVE-2020-12066	20		2020-04-22	2022-04-29	7.8	None	Remote	Low	Not required	None	None	Complete
CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.
3	CVE-2020-12050	362		2020-04-30	2020-05-27	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.
4	CVE-2020-11945	190	Exec Code Overflow	2020-04-23	2021-03-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials).
5	CVE-2020-11884	362	Exec Code	2020-04-29	2021-01-04	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.
6	CVE-2020-11810	362		2020-04-27	2022-05-12	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.
7	CVE-2020-11793	416	DoS Exec Code Mem. Corr.	2020-04-17	2020-06-13	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).
8	CVE-2020-11741	909	DoS +Priv +Info	2020-04-14	2022-05-03	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges. For guests for which "active" profiling was enabled by the administrator, the xenoprof code uses the standard Xen shared ring structure. Unfortunately, this code did not treat the guest as a potential adversary: it trusts the guest not to modify buffer size information or modify head / tail pointers in unexpected ways. This can crash the host (DoS). Privilege escalation cannot be ruled out.
9	CVE-2020-11740	212	+Info	2020-04-14	2022-05-03	2.1	None	Local	Low	Not required	Partial	None	None
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.
10	CVE-2020-11739	362	DoS +Priv +Info	2020-04-14	2022-05-03	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to re-order the memory access with the preceding ones. In other words, the unlock may be seen by another processor before all the memory accesses within the "critical" section. As a consequence, it may be possible to have a writer executing a critical section at the same time as readers or another writer. In other words, many of the assumptions (e.g., a variable cannot be modified after a check) in the critical sections are not safe anymore. The read-write locks are used in hypercalls (such as grant-table ones), so a malicious guest could exploit the race. For instance, there is a small window where Xen can leak memory if XENMAPSPACE_grant_table is used concurrently. A malicious guest may be able to leak memory, or cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded.
11	CVE-2020-10704	674	DoS Overflow	2020-05-06	2021-12-20	5.0	None	Remote	Low	Not required	None	None	Partial
A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
12	CVE-2020-10700	416	DoS	2020-05-04	2020-09-01	2.6	None	Remote	High	Not required	None	None	Partial
A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
13	CVE-2020-10684	862		2020-03-24	2021-12-20	3.6	None	Local	Low	Not required	None	Partial	Partial
A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable when inject is enabled, overwriting the ansible_facts after the clean. An attacker could take advantage of this by altering the ansible_facts, such as ansible_hosts, users and any other key data which would lead into privilege escalation or code injection.
14	CVE-2020-10663	20		2020-04-28	2022-04-18	5.0	None	Remote	Low	Not required	None	Partial	None
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.
15	CVE-2020-10531	787	Overflow	2020-03-12	2022-04-26	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
16	CVE-2020-10188	120	Exec Code Overflow	2020-03-06	2021-11-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
17	CVE-2020-10174	362	Exec Code	2020-03-05	2022-01-01	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this location, an attacker can attempt to win a race condition to replace scripts created by Timeshift with attacker-controlled scripts. Upon success, an attacker-controlled script is executed with full root privileges. This logic is practically always triggered when Timeshift runs regardless of the command-line arguments used.
18	CVE-2020-10029	787	Overflow	2020-03-04	2022-04-27	2.1	None	Local	Low	Not required	None	None	Partial
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.
19	CVE-2020-10018	416	Exec Code Mem. Corr.	2020-03-02	2022-04-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling.
20	CVE-2020-9440	79	XSS	2020-03-10	2022-05-24	4.3	None	Remote	Medium	Not required	None	Partial	None
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.
21	CVE-2020-9431	400		2020-02-27	2021-07-21	5.0	None	Remote	Low	Not required	None	None	Partial
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.
22	CVE-2020-9430	20		2020-02-27	2021-02-09	5.0	None	Remote	Low	Not required	None	None	Partial
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.
23	CVE-2020-9428	74		2020-02-27	2021-07-21	5.0	None	Remote	Low	Not required	None	None	Partial
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.
24	CVE-2020-9369	400	DoS	2020-02-24	2022-01-01	5.0	None	Remote	Low	Not required	None	None	Partial
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with malformed parameters.
25	CVE-2020-9365	125		2020-02-24	2020-11-16	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c.
26	CVE-2020-9359		Exec Code	2020-03-24	2022-04-12	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
27	CVE-2020-9281	79	XSS	2020-03-07	2022-02-21	4.3	None	Remote	Medium	Not required	None	Partial	None
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).
28	CVE-2020-9273	416	Exec Code	2020-02-20	2021-09-14	9.0	None	Remote	Low	???	Complete	Complete	Complete
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.
29	CVE-2020-8955	120	DoS Overflow	2020-02-12	2022-04-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).
30	CVE-2020-8945	416	Exec Code	2020-02-12	2020-07-24	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
31	CVE-2020-8835	125		2020-04-02	2022-04-26	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)
32	CVE-2020-8813	78	Exec Code	2020-02-22	2022-05-24	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
33	CVE-2020-8518	94	Exec Code	2020-02-17	2022-01-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.
34	CVE-2020-8450	119	Overflow	2020-02-04	2021-07-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.
35	CVE-2020-8449	668		2020-02-04	2021-03-04	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.
36	CVE-2020-8130	78		2020-02-24	2020-06-30	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `\|`.
37	CVE-2020-7957	20	DoS	2020-02-12	2022-01-01	5.0	None	Remote	Low	Not required	None	None	Partial
The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a denial of service in which the recipient cannot read all of their messages.
38	CVE-2020-7595	835		2020-01-21	2022-07-25	5.0	None	Remote	Low	Not required	None	None	Partial
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
39	CVE-2020-7106	79	XSS	2020-01-16	2022-05-24	4.3	None	Remote	Medium	Not required	None	Partial	None
Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).
40	CVE-2020-7046	835		2020-02-12	2021-12-30	7.8	None	Remote	Low	Not required	None	None	Complete
lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop.
41	CVE-2020-7044	125		2020-01-16	2022-04-18	5.0	None	Remote	Low	Not required	None	None	Partial
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.
42	CVE-2020-7043	295		2020-02-27	2020-10-09	6.4	None	Remote	Low	Not required	Partial	Partial	None
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstrated by a good.example.com\x00evil.example.com attack.
43	CVE-2020-7042	295		2020-02-27	2021-07-21	5.0	None	Remote	Low	Not required	None	Partial	None
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).
44	CVE-2020-7041	295		2020-02-27	2020-10-09	5.0	None	Remote	Low	Not required	None	Partial	None
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.
45	CVE-2020-6851	787	Overflow	2020-01-13	2022-04-29	5.0	None	Remote	Low	Not required	None	None	Partial
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
46	CVE-2020-6802	79	XSS	2020-03-24	2021-03-30	4.3	None	Remote	Medium	Not required	None	Partial	None
In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.
47	CVE-2020-6750			2020-01-09	2022-01-01	4.3	None	Remote	Medium	Not required	Partial	None	None
GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.
48	CVE-2020-6454	416		2020-04-13	2022-05-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
49	CVE-2020-6451	416		2020-04-13	2022-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
50	CVE-2020-6450	416		2020-04-13	2022-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Total number of vulnerabilities : 520 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11