Vulnerabilities > Fedoraproject > Fedora

DATE CVE VULNERABILITY TITLE RISK
2024-02-29 CVE-2024-1939 Type Confusion vulnerability in multiple products
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-843
8.8
2024-02-28 CVE-2024-27285 Cross-site Scripting vulnerability in multiple products
YARD is a Ruby Documentation tool.
network
low complexity
yardoc fedoraproject debian CWE-79
6.1
2024-02-27 CVE-2024-25711 diffoscope before 256 allows directory traversal via an embedded filename in a GPG file.
network
low complexity
reproducible-builds fedoraproject
7.5
2024-02-26 CVE-2024-1622 Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening.
network
low complexity
nlnetlabs fedoraproject
7.5
2024-02-26 CVE-2024-23835 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
low complexity
oisf fedoraproject CWE-770
7.5
2024-02-26 CVE-2024-23836 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
low complexity
oisf fedoraproject CWE-770
7.5
2024-02-26 CVE-2024-23837 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
LibHTP is a security-aware parser for the HTTP protocol.
network
low complexity
oisf fedoraproject CWE-770
7.5
2024-02-26 CVE-2024-23839 Use After Free vulnerability in multiple products
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
high complexity
oisf fedoraproject CWE-416
8.1
2024-02-26 CVE-2024-24568 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
low complexity
oisf fedoraproject
5.3
2024-02-24 CVE-2024-21501 Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system (including project dependencies).
network
low complexity
apostrophecms fedoraproject
5.3