Vulnerabilities > Fedoraproject

DATE CVE VULNERABILITY TITLE RISK
2021-04-06 CVE-2021-30154 Cross-Site Scripting vulnerability in multiple products
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2.
4.3
2021-04-05 CVE-2021-20307 USE of Externally-Controlled Format String vulnerability in multiple products
Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.
7.5
2021-04-02 CVE-2021-1871 A logic issue was addressed with improved restrictions.
network
low complexity
apple fedoraproject
7.5
2021-04-02 CVE-2021-1844 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
A memory corruption issue was addressed with improved validation.
6.8
2021-04-02 CVE-2021-1801 This issue was addressed with improved iframe sandbox enforcement. 4.3
2021-04-02 CVE-2021-1799 A port redirection issue was addressed with additional port validation. 4.3
2021-04-02 CVE-2021-1789 Type Confusion vulnerability in multiple products
A type confusion issue was addressed with improved state handling.
6.8
2021-04-02 CVE-2021-1788 USE After Free vulnerability in multiple products
A use after free issue was addressed with improved memory management.
6.8
2021-04-02 CVE-2021-1765 This issue was addressed with improved iframe sandbox enforcement. 4.3
2021-04-02 CVE-2020-29623 "Clear History and Website Data" did not clear the history.
local
low complexity
apple fedoraproject
2.1