Fedoraproject Fedora vulnerabilities
5,287 known vulnerabilities affecting fedoraproject/fedora.
Total CVEs
5,287
CISA KEV
88
actively exploited
Public exploits
173
Exploited in wild
143
Severity breakdown
CRITICAL516HIGH2329MEDIUM2269LOW173
Vulnerabilities
Page 153 of 265
CVE-2010-5298P4MEDIUMCVSS 4.0v19v202014-04-14
CVE-2010-5298 [MEDIUM] CWE-362 CVE-2010-5298: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_
Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.
nvd
CVE-2022-2819P4HIGHCVSS 7.8v352022-08-15
CVE-2022-2819 [HIGH] CWE-122 CVE-2022-2819: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
nvd
CVE-2022-3037P4HIGHCVSS 7.8v35v36+1 more2022-08-30
CVE-2022-3037 [HIGH] CWE-416 CVE-2022-3037: Use After Free in GitHub repository vim/vim prior to 9.0.0322.
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
nvd
CVE-2022-2817P4HIGHCVSS 7.8v352022-08-15
CVE-2022-2817 [HIGH] CWE-416 CVE-2022-2817: Use After Free in GitHub repository vim/vim prior to 9.0.0213.
Use After Free in GitHub repository vim/vim prior to 9.0.0213.
nvd
CVE-2022-3016P4HIGHCVSS 7.8v372022-08-28
CVE-2022-3016 [HIGH] CWE-416 CVE-2022-3016: Use After Free in GitHub repository vim/vim prior to 9.0.0286.
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
nvd
CVE-2022-2946P4HIGHCVSS 7.8v352022-08-23
CVE-2022-2946 [HIGH] CWE-416 CVE-2022-2946: Use After Free in GitHub repository vim/vim prior to 9.0.0246.
Use After Free in GitHub repository vim/vim prior to 9.0.0246.
nvd
CVE-2022-2889P4HIGHCVSS 7.8v352022-08-19
CVE-2022-2889 [HIGH] CWE-416 CVE-2022-2889: Use After Free in GitHub repository vim/vim prior to 9.0.0225.
Use After Free in GitHub repository vim/vim prior to 9.0.0225.
nvd
CVE-2022-3234P4HIGHCVSS 7.8v35v36+1 more2022-09-17
CVE-2022-3234 [HIGH] CWE-122 CVE-2022-3234: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
nvd
CVE-2022-3297P4HIGHCVSS 7.8v35v36+1 more2022-09-25
CVE-2022-3297 [HIGH] CWE-416 CVE-2022-3297: Use After Free in GitHub repository vim/vim prior to 9.0.0579.
Use After Free in GitHub repository vim/vim prior to 9.0.0579.
nvd
CVE-2022-3352P4HIGHCVSS 7.8v35v36+1 more2022-09-29
CVE-2022-3352 [HIGH] CWE-416 CVE-2022-3352: Use After Free in GitHub repository vim/vim prior to 9.0.0614.
Use After Free in GitHub repository vim/vim prior to 9.0.0614.
nvd
CVE-2022-3235P4HIGHCVSS 7.8v35v36+1 more2022-09-18
CVE-2022-3235 [HIGH] CWE-416 CVE-2022-3235: Use After Free in GitHub repository vim/vim prior to 9.0.0490.
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
nvd
CVE-2022-3099P4HIGHCVSS 7.8v35v36+1 more2022-09-03
CVE-2022-3099 [HIGH] CWE-416 CVE-2022-3099: Use After Free in GitHub repository vim/vim prior to 9.0.0360.
Use After Free in GitHub repository vim/vim prior to 9.0.0360.
nvd
CVE-2023-0288P4HIGHCVSS 7.8v362023-01-13
CVE-2023-0288 [HIGH] CWE-122 CVE-2023-0288: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
nvd
CVE-2022-3256P4HIGHCVSS 7.8v35v36+1 more2022-09-22
CVE-2022-3256 [HIGH] CWE-416 CVE-2022-3256: Use After Free in GitHub repository vim/vim prior to 9.0.0530.
Use After Free in GitHub repository vim/vim prior to 9.0.0530.
nvd
CVE-2023-5535P4HIGHCVSS 7.8v37v38+1 more2023-10-11
CVE-2023-5535 [HIGH] CWE-416 CVE-2023-5535: Use After Free in GitHub repository vim/vim prior to v9.0.2010.
Use After Free in GitHub repository vim/vim prior to v9.0.2010.
nvd
CVE-2022-2849P4HIGHCVSS 7.8v372022-08-17
CVE-2022-2849 [HIGH] CWE-122 CVE-2022-2849: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
nvd
CVE-2021-41500P4HIGHCVSS 7.5v342021-12-17
CVE-2021-41500 [HIGH] CWE-697 CVE-2021-41500: Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmo
Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.
nvd
CVE-2022-37047P4HIGHCVSS 7.8v35v36+1 more2022-08-18
CVE-2022-37047 [HIGH] CVE-2022-37047: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940.
nvd
CVE-2022-37048P4HIGHCVSS 7.8v35v36+1 more2022-08-18
CVE-2022-37048 [HIGH] CVE-2022-37048: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.
nvd
CVE-2022-37049P4HIGHCVSS 7.8v35v36+1 more2022-08-18
CVE-2022-37049 [HIGH] CVE-2022-37049: The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
nvd