Vulnerabilities > Fedoraproject > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-04-01 CVE-2021-22876 Information Exposure vulnerability in multiple products
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.
5.3
2021-04-01 CVE-2021-20291 A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1.
network
low complexity
storage-project redhat fedoraproject
6.5
2021-03-30 CVE-2021-29650 An issue was discovered in the Linux kernel before 5.11.11.
local
low complexity
linux fedoraproject debian
5.5
2021-03-30 CVE-2021-29649 Memory Leak vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.11.11.
local
low complexity
linux fedoraproject CWE-401
5.5
2021-03-30 CVE-2021-29648 Improper Restriction of Excessive Authentication Attempts vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.11.11.
local
low complexity
linux fedoraproject CWE-307
5.5
2021-03-30 CVE-2021-29647 Missing Initialization of Resource vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.11.11.
local
low complexity
linux fedoraproject debian CWE-909
5.5
2021-03-30 CVE-2021-29646 An issue was discovered in the Linux kernel before 5.11.11.
local
low complexity
linux fedoraproject
5.5
2021-03-26 CVE-2021-21333 Cross-site Scripting vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
network
high complexity
matrix fedoraproject CWE-79
6.1
2021-03-25 CVE-2021-3467 A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder.
local
low complexity
jasper-project fedoraproject
5.5
2021-03-25 CVE-2021-3446 Use of Insufficiently Random Values vulnerability in multiple products
A flaw was found in libtpms in versions before 0.8.2.
5.5