Known vulnerabilities in CentOS - page 15

Vendor: CentOS Project
Software: CentOS
Software CPE: cpe:2.3:o:centos_project:centos:*:*:*:*:*:*:*:*
Website: https://www.centos.org/
Total vulnerabilities: 710
Public exploits: 54
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CentOS CentOS is affected by 710 known vulnerabilities: 4 critical, 183 high, 267 medium, 256 low Critical High Medium Low

Vulnerabilities (710)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61109 - Improper Access Control
CVE-2022-26386		 CWE-284 Low
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 24 more
#VU61105 - Use After Free
CVE-2022-26381		 CWE-416 High
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61104 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-26387		 CWE-367 Medium
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61103 - Permissions, Privileges, and Access Controls
CVE-2022-26384		 CWE-264 Medium
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61102 - Insufficient UI Warning of Dangerous Operations
CVE-2022-26383		 CWE-357 Low
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61033 - Use After Free
CVE-2022-26486		 CWE-416 Critical
No
Exploited
 - 05.03.2022 SB2022030501
SB2022030720
SB2022030724
and 26 more
#VU61032 - Use After Free
CVE-2022-26485		 CWE-416 Critical
Available
Exploited
 - 05.03.2022 SB2022030501
SB2022030720
SB2022030724
and 28 more
#VU60867 - Use After Free
CVE-2021-4091		 CWE-416 Medium
No
No
 - 25.02.2022 SB2022022501
SB2022022502
SB2022022528
and 11 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 - 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60739 - Integer overflow
CVE-2022-25315		 CWE-190 High
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU60628 - Out-of-bounds write
CVE-2022-0566		 CWE-787 High
No
No
 - 15.02.2022 SB2022021517
SB2022021814
SB2022022503
and 12 more
#VU60395 - Permissions, Privileges, and Access Controls
CVE-2022-22754		 CWE-264 High
No
No
 - 08.02.2022 SB2022020837
SB2022021015
SB2022021017
and 29 more
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817		 CWE-749 High
No
No
 - 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more
#VU60002 - Out-of-bounds read
CVE-2022-22816		 CWE-125 Medium
No
No
 - 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 33 more
#VU48516 - Reachable Assertion
CVE-2020-25709		 CWE-617 Medium
No
No
 - 18.11.2020 SB2020111801
SB2020111802
SB2020103044
and 16 more
#VU48515 - Reachable Assertion
CVE-2020-25710		 CWE-617 Medium
No
No
 - 17.11.2020 SB2020111801
SB2020111802
SB2020103045
and 15 more


Showing elements 281 - 300 out of 710