https://vulnogram.org/ Most recent CVEs assigned by Fedora Project (fedora). https://vulnogram.org/seaview/icons/fedora.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-103680 https://vulnogram.org/CVE-2026-103680 A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can… Low Network Exploitable Thu, 01 Oct 2026 11:34:51 GMT https://vulnogram.org/CVE-2026-103679 https://vulnogram.org/CVE-2026-103679 A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple message bodies. During extraction, improper memory management trigger… Medium Network Exploitable Thu, 01 Oct 2026 11:34:50 GMT https://vulnogram.org/CVE-2026-103678 https://vulnogram.org/CVE-2026-103678 A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the application fails to properly validate input buffer boundaries before copying… Medium Network Exploitable Thu, 01 Oct 2026 11:34:48 GMT https://vulnogram.org/CVE-2026-103431 https://vulnogram.org/CVE-2026-103431 colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of… High Thu, 01 Oct 2026 08:35:40 GMT https://vulnogram.org/CVE-2026-102588 https://vulnogram.org/CVE-2026-102588 A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger u… Medium Network Exploitable Wed, 30 Sep 2026 08:36:23 GMT https://vulnogram.org/CVE-2026-102587 https://vulnogram.org/CVE-2026-102587 A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lists using profile attributes they are not permitted to view directly, r… Low Wed, 30 Sep 2026 08:36:21 GMT https://vulnogram.org/CVE-2026-102586 https://vulnogram.org/CVE-2026-102586 A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (XSS) attack. By convincing an unauthenticated user to access a specially crafted password r… Medium Network Exploitable Wed, 30 Sep 2026 08:36:19 GMT https://vulnogram.org/CVE-2026-102585 https://vulnogram.org/CVE-2026-102585 A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit t… Medium Wed, 30 Sep 2026 08:36:17 GMT https://vulnogram.org/CVE-2026-102584 https://vulnogram.org/CVE-2026-102584 A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty… Medium Wed, 30 Sep 2026 08:36:14 GMT https://vulnogram.org/CVE-2026-102583 https://vulnogram.org/CVE-2026-102583 A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permit… Low Wed, 30 Sep 2026 08:36:12 GMT https://vulnogram.org/CVE-2026-102582 https://vulnogram.org/CVE-2026-102582 A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an… Low Wed, 30 Sep 2026 08:36:10 GMT https://vulnogram.org/CVE-2026-102581 https://vulnogram.org/CVE-2026-102581 A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary scr… Medium Wed, 30 Sep 2026 08:36:08 GMT https://vulnogram.org/CVE-2026-102580 https://vulnogram.org/CVE-2026-102580 A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal pro… Low Wed, 30 Sep 2026 08:36:06 GMT https://vulnogram.org/CVE-2026-102579 https://vulnogram.org/CVE-2026-102579 A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. This issue le… Medium Wed, 30 Sep 2026 08:36:04 GMT https://vulnogram.org/CVE-2026-102578 https://vulnogram.org/CVE-2026-102578 A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could a… Medium Wed, 30 Sep 2026 08:36:01 GMT https://vulnogram.org/CVE-2026-102577 https://vulnogram.org/CVE-2026-102577 A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker can induce t… Medium Wed, 30 Sep 2026 08:35:59 GMT https://vulnogram.org/CVE-2026-91841 https://vulnogram.org/CVE-2026-91841 A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands… High Fri, 25 Sep 2026 17:56:34 GMT https://vulnogram.org/CVE-2026-91840 https://vulnogram.org/CVE-2026-91840 A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an… High Fri, 25 Sep 2026 17:56:32 GMT https://vulnogram.org/CVE-2026-91839 https://vulnogram.org/CVE-2026-91839 A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed (CR/LF) characters in VPN connection profile credentials. A local unprivileged user can… High Fri, 25 Sep 2026 17:56:31 GMT https://vulnogram.org/CVE-2026-91838 https://vulnogram.org/CVE-2026-91838 A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA ce… High Fri, 25 Sep 2026 17:51:44 GMT https://vulnogram.org/CVE-2026-91837 https://vulnogram.org/CVE-2026-91837 A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell met… High Fri, 25 Sep 2026 16:14:39 GMT https://vulnogram.org/CVE-2026-97222 https://vulnogram.org/CVE-2026-97222 A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed SheetObjectComponent element, the XML parser can dereference a freed sheet-object component, causing Gnumeric to crash. Medium Fri, 25 Sep 2026 13:51:57 GMT https://vulnogram.org/CVE-2026-19816 https://vulnogram.org/CVE-2026-19816 A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because… High Mon, 14 Sep 2026 20:05:00 GMT https://vulnogram.org/CVE-2026-19624 https://vulnogram.org/CVE-2026-19624 A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties (vpn.data and vpn.secrets values) unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged user can create and a… High Mon, 14 Sep 2026 19:19:43 GMT https://vulnogram.org/CVE-2026-77652 https://vulnogram.org/CVE-2026-77652 A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren->pPal = g_new0(WPGColorRGB, 256); When handling a WPG_COLO… High Wed, 26 Aug 2026 19:21:39 GMT https://vulnogram.org/CVE-2026-77658 https://vulnogram.org/CVE-2026-77658 A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus_load() reads the number of bus handles from the file attribute "bus_handles" us… High Wed, 26 Aug 2026 12:10:07 GMT https://vulnogram.org/CVE-2026-18487 https://vulnogram.org/CVE-2026-18487 A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon (for example, [https://trusted.com:80@attack… Medium Network Exploitable Thu, 06 Aug 2026 16:32:39 GMT https://vulnogram.org/CVE-2026-3842 https://vulnogram.org/CVE-2026-3842 A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpu_physical_memory_map() returns a shorter length than expected, leading to an out-of-bou… High Thu, 16 Jul 2026 00:20:02 GMT https://vulnogram.org/CVE-2026-3195 https://vulnogram.org/CVE-2026-3195 A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the `virtio_snd_pcm_in_cb` function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exi… High Fri, 19 Jun 2026 16:23:57 GMT https://vulnogram.org/CVE-2026-3196 https://vulnogram.org/CVE-2026-3196 An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of servi… Medium Fri, 19 Jun 2026 16:23:02 GMT https://vulnogram.org/CVE-2026-1767 https://vulnogram.org/CVE-2026-1767 A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer overflow vulnerability by providing a specially crafted MP3 file containing… Medium Tue, 16 Jun 2026 00:34:48 GMT https://vulnogram.org/CVE-2026-1766 https://vulnogram.org/CVE-2026-1766 A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when processing specially crafted MP3 files containing mal… Medium Tue, 16 Jun 2026 00:34:39 GMT https://vulnogram.org/CVE-2026-1765 https://vulnogram.org/CVE-2026-1765 A flaw was found in the `tracker-extract-mp3` component of GNOME localsearch (previously known as tracker-miners). This vulnerability, a heap buffer overflow, occurs when processing specially crafted MP3 files. A remote attacker could exploit this by… Medium Tue, 16 Jun 2026 00:34:27 GMT https://vulnogram.org/CVE-2026-1764 https://vulnogram.org/CVE-2026-1764 A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds check in the `extract_performers_tags` function can lead to a heap buffer… Medium Tue, 16 Jun 2026 00:32:34 GMT https://vulnogram.org/CVE-2026-0708 https://vulnogram.org/CVE-2026-0708 A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that contains a key with an embedded null byte. This can cause a segmentation fault (SEGV fault) in the `uc… High Network Exploitable Tue, 17 Mar 2026 02:28:08 GMT https://vulnogram.org/CVE-2026-26047 https://vulnogram.org/CVE-2026-26047 A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticat… Medium Sat, 21 Feb 2026 05:40:11 GMT https://vulnogram.org/CVE-2026-26046 https://vulnogram.org/CVE-2026-26046 A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted… High Sat, 21 Feb 2026 05:40:08 GMT https://vulnogram.org/CVE-2026-26045 https://vulnogram.org/CVE-2026-26045 A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Sinc… High Sat, 21 Feb 2026 05:40:05 GMT https://vulnogram.org/CVE-2026-2681 https://vulnogram.org/CVE-2026-2681 A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the blst_sha256_bcopy assembly routine, occurs due to a missing zero-length guard. A remote attacker can exploit this by providing a zer… Medium Network Exploitable Thu, 19 Feb 2026 06:58:47 GMT https://vulnogram.org/CVE-2026-0665 https://vulnogram.org/CVE-2026-0665 An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potent… Medium Wed, 18 Feb 2026 20:50:03 GMT https://vulnogram.org/CVE-2025-8860 https://vulnogram.org/CVE-2025-8860 A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, the .write callback `uefi_vars_write` is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buff… Low Wed, 18 Feb 2026 20:49:06 GMT https://vulnogram.org/CVE-2025-14876 https://vulnogram.org/CVE-2025-14876 A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host syst… Medium Wed, 18 Feb 2026 20:47:54 GMT https://vulnogram.org/CVE-2025-1272 https://vulnogram.org/CVE-2025-1272 The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O por… High Wed, 18 Feb 2026 20:29:15 GMT https://vulnogram.org/CVE-2025-12343 https://vulnogram.org/CVE-2025-12343 A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant… Low Wed, 18 Feb 2026 20:28:08 GMT https://vulnogram.org/CVE-2025-10256 https://vulnogram.org/CVE-2025-10256 A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking… Medium Network Exploitable Wed, 18 Feb 2026 20:26:46 GMT https://vulnogram.org/CVE-2025-0577 https://vulnogram.org/CVE-2025-0577 An insufficient entropy vulnerability was found in glibc. The getrandom and arc4random family of functions may return predictable randomness if these functions are called again after the fork, which happens concurrently with a call to any of these fu… Medium Network Exploitable Wed, 18 Feb 2026 20:25:34 GMT https://vulnogram.org/CVE-2026-1200 https://vulnogram.org/CVE-2026-1200 A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences. Medium Wed, 18 Feb 2026 20:21:56 GMT https://vulnogram.org/CVE-2025-14282 https://vulnogram.org/CVE-2025-14282 A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performi… Medium Thu, 12 Feb 2026 21:37:57 GMT https://vulnogram.org/CVE-2025-67857 https://vulnogram.org/CVE-2025-67857 A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially lea… Medium Network Exploitable Tue, 03 Feb 2026 10:52:22 GMT https://vulnogram.org/CVE-2025-67856 https://vulnogram.org/CVE-2025-67856 A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awarding process, allowed badges to be granted without proper verification. This could enable unauthorized users to obtain badges the… Medium Tue, 03 Feb 2026 10:52:19 GMT