# Fedoraproject Fedora


- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2015-3306](https://insights.sbomify.com/CVE-2015-3306/): ProFTPD Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2024-4577](https://insights.sbomify.com/CVE-2024-4577/): PHP-CGI OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-44026](https://insights.sbomify.com/CVE-2021-44026/): Roundcube Webmail SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2021-42013](https://insights.sbomify.com/CVE-2021-42013/): Apache HTTP Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2021-39226](https://insights.sbomify.com/CVE-2021-39226/): Grafana Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-1870](https://insights.sbomify.com/CVE-2021-1870/): Apple iOS, iPadOS, and macOS WebKit Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-1871](https://insights.sbomify.com/CVE-2021-1871/): Apple iOS, iPadOS, and macOS WebKit Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2020-16846](https://insights.sbomify.com/CVE-2020-16846/): SaltStack Salt Shell Injection (critical 9.8, exploited in the wild)
- [CVE-2020-1938](https://insights.sbomify.com/CVE-2020-1938/): Apache Tomcat Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2020-7247](https://insights.sbomify.com/CVE-2020-7247/): OpenSMTPD Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-5544](https://insights.sbomify.com/CVE-2019-5544/): VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow (critical 9.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/fedoraproject/fedora/