Known vulnerabilities in CentOS - page 19

Vendor: CentOS Project
Software: CentOS
Software CPE: cpe:2.3:o:centos_project:centos:*:*:*:*:*:*:*:*
Website: https://www.centos.org/
Total vulnerabilities: 710
Public exploits: 54
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CentOS CentOS is affected by 710 known vulnerabilities: 4 critical, 183 high, 267 medium, 256 low Critical High Medium Low

Vulnerabilities (710)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58503 - Cross-Site Request Forgery (CSRF)
CVE-2021-44227		 CWE-352 Medium
No
No
 - 03.12.2021 SB2021120305
SB2021120306
SB2021120314
and 12 more
#VU58347 - Cross-Site Request Forgery (CSRF)
CVE-2021-42097		 CWE-352 Medium
No
No
 - 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 10 more
#VU58333 - Improper Privilege Management
CVE-2021-41617		 CWE-269 Low
No
No
 - 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU58332 - Use After Free
CVE-2020-36385		 CWE-416 Low
No
No
 - 23.11.2021 SB2021060728
SB2021112323
SB2021112324
and 39 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57490 - Improper input validation
CVE-2021-35564		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 86 more
#VU57491 - Improper input validation
CVE-2021-35556		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 76 more
#VU57492 - Improper input validation
CVE-2021-35559		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 80 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU57346 - Use After Free
CVE-2016-4658		 CWE-416 High
No
No
 - 13.10.2021 SB2016092503
SB2021101345
SB2021102109
and 9 more
#VU56828 - NULL Pointer Dereference
CVE-2021-37750		 CWE-476 Medium
No
No
 - 22.09.2021 SB2021092223
SB2021092224
SB2021092811
and 26 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU55334 - Improper Authentication
CVE-2021-3652		 CWE-287 Medium
No
No
 - 27.07.2021 SB2021072715
SB2021072716
SB2021081121
and 11 more
#VU54477 - Insufficient Verification of Data Authenticity
CVE-2021-20271		 CWE-345 Medium
No
No
 - 30.06.2021 SB2021063035
SB2021063038
SB2021071302
and 34 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU24489 - Missing release of memory after effective lifetime
CVE-2019-19956		 CWE-401 Medium
No
No
 - 22.01.2020 SB2019122405
SB2020021011
SB2020052301
and 24 more
#VU24488 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-7595		 CWE-835 Medium
No
No
 - 22.01.2020 SB2020012220
SB2020021011
SB2020052301
and 30 more
#VU24487 - Missing release of memory after effective lifetime
CVE-2019-20388		 CWE-401 Medium
No
No
 - 22.01.2020 SB2020012220
SB2020052301
SB2020062607
and 28 more
#VU365 - Cross-Site Request Forgery (CSRF)
CVE-2016-6893		 CWE-352 Medium
No
No
 - 07.09.2016 SB2016090702
SB2018040606
SB2021120306
and 3 more


Showing elements 361 - 380 out of 710