Known vulnerabilities in CentOS 7 - page 32

Vendor: CentOS Project
Software: CentOS
Version: 7
Software CPE: cpe:2.3:o:centos_project:centos:*:*:*:*:*:*:*:*
Website: https://www.centos.org/
Total vulnerabilities: 686
Public exploits: 52
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting CentOS version 7 CentOS 7 is affected by 686 vulnerabilities: 4 critical, 180 high, 261 medium, 241 low Critical High Medium Low

Vulnerabilities (686)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27258 - Insufficiently Protected Credentials
CVE-2020-5260		 CWE-522 Medium
Public exploit available
No
 - 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 27 more
#VU27219 - Improper input validation
CVE-2020-2805		 CWE-20 High
No
No
 - 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 47 more
#VU27222 - Improper input validation
CVE-2020-2830		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 45 more
#VU27224 - Improper input validation
CVE-2020-2800		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 47 more
#VU27212 - Improper input validation
CVE-2020-2803		 CWE-20 High
No
No
 - 23.04.2020 SB2020042301
SB2020042302
SB2020042309
and 48 more
#VU26653 - Memory corruption
CVE-2020-6825		 CWE-119 High
No
No
 - 07.04.2020 SB2020040743
SB2020040744
SB2020040748
and 25 more
#VU26650 - Out-of-bounds write
CVE-2020-6822		 CWE-787 High
No
No
 - 07.04.2020 SB2020040743
SB2020040744
SB2020040748
and 24 more
#VU26649 - Out-of-bounds read
CVE-2020-6821		 CWE-125 Medium
No
No
 - 07.04.2020 SB2020040743
SB2020040744
SB2020040748
and 26 more
#VU26574 - Use After Free
CVE-2020-6820		 CWE-416 Critical
No
Exploited
 - 03.04.2020 SB2020040320
SB2020040401
SB2020040402
and 25 more
#VU26573 - Use After Free
CVE-2020-6819		 CWE-416 Critical
No
Exploited
 - 03.04.2020 SB2020040320
SB2020040401
SB2020040402
and 25 more
#VU26413 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20060		 CWE-200 Medium
Public exploit available
No
 - 26.03.2020 SB2020032626
SB2020031827
SB2019091403
and 20 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-11236		 CWE-93 Medium
Public exploit available
No
 - 26.03.2020 SB2020032626
SB2020031827
SB2019091504
and 36 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 8 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 11 more
#VU26343 - Heap-based Buffer Overflow
CVE-2019-15690		 CWE-122 High
No
No
 - 24.03.2020 SB2020032410
SB2020032524
SB2020032610
and 5 more
#VU26210 - Improper Check for Dropped Privileges
CVE-2019-20044		 CWE-273 Low
Public exploit available
No
 - 19.03.2020 SB2020022427
SB2020031902
SB2020032519
and 13 more
#VU26149 - Integer overflow
CVE-2020-10531		 CWE-190 High
No
No
 - 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU25856 - Out-of-bounds read
CVE-2019-20503		 CWE-125 Medium
No
No
 - 10.03.2020 SB2020031005
SB2020031006
SB2020031019
and 54 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938		 CWE-22 High
Public exploit available
Exploited
 - 21.02.2020 SB2020022111
SB2020031401
SB2020031402
and 31 more
#VU19388 - Credentials Management
CVE-2018-18074		 CWE-255 High
No
No
 - 26.07.2019 SB2019072007
SB2019080710
SB2020032626
and 18 more


Showing elements 621 - 640 out of 686