Known vulnerabilities in CentOS - page 12

Vendor: CentOS Project
Software: CentOS
Software CPE: cpe:2.3:o:centos_project:centos:*:*:*:*:*:*:*:*
Website: https://www.centos.org/
Total vulnerabilities: 710
Public exploits: 54
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CentOS CentOS is affected by 710 known vulnerabilities: 4 critical, 183 high, 267 medium, 256 low Critical High Medium Low

Vulnerabilities (710)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36318		 CWE-79 Medium
No
No
 - 26.07.2022 SB2022072633
SB2022072634
SB2022072815
and 36 more
#VU65793 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-36319		 CWE-451 Low
No
No
 - 26.07.2022 SB2022072633
SB2022072634
SB2022072815
and 36 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65496 - Improper input validation
CVE-2022-21541		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65497 - Improper input validation
CVE-2022-21540		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65223 - Out-of-bounds write
CVE-2022-2320		 CWE-787 Low
No
No
 - 13.07.2022 SB2022071303
SB2022071304
SB2022071305
and 28 more
#VU65222 - Out-of-bounds write
CVE-2022-2319		 CWE-787 Low
No
No
 - 13.07.2022 SB2022071303
SB2022071304
SB2022071305
and 25 more
#VU64661 - Insufficient Session Expiration
CVE-2022-0996		 CWE-613 Medium
No
No
 - 24.06.2022 SB2022062433
SB2022062933
SB2022072073
and 13 more
#VU64484 - Reachable Assertion
CVE-2021-46784		 CWE-617 Medium
No
No
 - 18.06.2022 SB2022061801
SB2022062237
SB2022062908
and 20 more
#VU64156 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-1729		 CWE-362 Low
No
No
 - 10.06.2022 SB2022061213
SB2022061417
SB2022061630
and 79 more
#VU64070 - Use After Free
CVE-2022-1966		 CWE-416 Low
Available
No
 - 08.06.2022 SB2022060822
SB2022060823
SB2022060824
and 44 more
#VU63872 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31736		 CWE-200 Low
No
No
 - 31.05.2022 SB2022053116
SB2022053126
SB2022060107
and 33 more
#VU63128 - Memory corruption
CVE-2022-0918		 CWE-119 Medium
Available
No
 - 12.05.2022 SB2022051236
SB2022051237
SB2022062433
and 13 more
#VU63126 - Permissions, Privileges, and Access Controls
CVE-2022-1552		 CWE-264 Medium
No
No
 - 12.05.2022 SB2022051213
SB2022051303
SB2022051304
and 48 more
#VU62077 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24801		 CWE-444 Medium
No
No
 - 12.04.2022 SB2022041212
SB2022050231
SB2022050232
and 21 more
#VU62002 - Improper input validation
CVE-2022-1271		 CWE-20 High
No
No
 - 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 - 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 - 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116		 CWE-93 Medium
No
No
 - 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916		 CWE-22 Medium
No
No
 - 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more


Showing elements 221 - 240 out of 710