Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fedoraproject fedora 35 vulnerabilities and exploits

(subscribe to this query)

5.9
CVSSv3
CVE-2021-40530
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's...
Cryptopp Crypto\\+\\+Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
8.8
CVSSv3
CVE-2021-30585
Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....
Google ChromeFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
5.9
CVSSv3
CVE-2021-39272
Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH....
Fetchmail FetchmailFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
7.5
CVSSv3
CVE-2022-27406
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size....
Freetype FreetypeFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2022-27405
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request....
Freetype FreetypeFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2021-29063
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called....
Mpmath MpmathFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
6.5
CVSSv3
CVE-2021-30583
Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page....
Google ChromeFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
7.8
CVSSv3
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file....
Google ChromeFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
6.4
CVSSv3
CVE-2021-22004
An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion...
Saltstack SaltFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35
7.5
CVE-2022-22728
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack....
Apache Libapreq2Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-26397insecure direct object referenceCVE-2022-46405wirelessCVE-2022-0543CVE-2022-41034CVE-2020-26399bypassCVE-2021-43866
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook