Known vulnerabilities in CentOS 7 - page 28

Vendor: CentOS Project
Software: CentOS
Version: 7
Software CPE: cpe:2.3:o:centos_project:centos:*:*:*:*:*:*:*:*
Website: https://www.centos.org/
Total vulnerabilities: 686
Public exploits: 52
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting CentOS version 7 CentOS 7 is affected by 686 vulnerabilities: 4 critical, 180 high, 261 medium, 241 low Critical High Medium Low

Vulnerabilities (686)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48472 - Memory corruption
CVE-2020-26968		 CWE-119 High
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48469 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26965		 CWE-200 Low
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48466 - Improperly Implemented Security Check for Standard
CVE-2020-26961		 CWE-358 Medium
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48465 - Use After Free
CVE-2020-26960		 CWE-416 High
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48464 - Use After Free
CVE-2020-26959		 CWE-416 Medium
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48463 - Permissions, Privileges, and Access Controls
CVE-2020-26958		 CWE-264 Medium
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26956		 CWE-79 Medium
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48461 -
CVE-2020-26953		 Medium
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48460 - Origin Validation Error
CVE-2020-16012		 CWE-346 Medium
Public exploit available
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 34 more
#VU48458 - Improper input validation
CVE-2020-26951		 CWE-20 Medium
No
No
 - 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 25 more
#VU48235 - Use After Free
CVE-2020-26950		 CWE-416 High
Public exploit available
No
 - 09.11.2020 SB2020110949
SB2020110950
SB2020111001
and 25 more
#VU48591 - Double Free
CVE-2020-25637		 CWE-415 Low
Public exploit available
No
 - 06.10.2020 SB2020112301
SB2020112303
SB2020112432
and 7 more
#VU48590 - Out-of-bounds write
CVE-2020-14331		 CWE-787 Low
No
No
 - 15.09.2020 SB2020091522
SB2020112302
SB2020112432
and 12 more
#VU47485 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14352		 CWE-22 Medium
No
No
 - 30.08.2020 SB2020100908
SB2020091826
SB2020083016
and 11 more
#VU45819 - Reachable Assertion
CVE-2020-8622		 CWE-617 Medium
No
No
 - 20.08.2020 SB2020082019
SB2020082201
SB2020083002
and 27 more
#VU45818 - Reachable Assertion
CVE-2020-8623		 CWE-617 Medium
No
No
 - 20.08.2020 SB2020082019
SB2020082201
SB2020083002
and 17 more
#VU45817 - Permissions, Privileges, and Access Controls
CVE-2020-8624		 CWE-264 Low
No
No
 - 20.08.2020 SB2020082019
SB2020082201
SB2020083002
and 17 more
#VU34374 - Improper input validation
CVE-2019-20811		 CWE-20 Low
No
No
 - 03.06.2020 SB2020060360
SB2020112302
SB2020112432
and 16 more
#VU28245 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-11078		 CWE-93 Low
No
No
 - 26.05.2020 SB2020052606
SB2020090111
SB2020110521
and 15 more
#VU32245 - Heap-based Buffer Overflow
CVE-2016-5766		 CWE-122 High
No
No
 - 07.08.2016 SB2016080705
SB2016091416
SB2016120406
and 7 more


Showing elements 541 - 560 out of 686