Known vulnerabilities in Fedora 21 - page 14

Software: Fedora
Version: 21
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 461
Public exploits: 30
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 21 Fedora 21 is affected by 461 vulnerabilities: 3 critical, 59 high, 255 medium, 144 low Critical High Medium Low

Vulnerabilities (461)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33146 - Heap-based Buffer Overflow
CVE-2014-8141
CWE-122 Medium
No
No
- 01.02.2020 SB2020020109
SB2018082027
SB2015041612
and 4 more
#VU34851 - Stack-based buffer overflow
CVE-2015-0242
CWE-121 High
No
No
- 27.01.2020 SB2020012740
SB2015031303
SB2015071802
and 1 more
#VU30420 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-0241
CWE-94 High
No
No
- 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 2 more
#VU30421 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-0243
CWE-94 High
No
No
- 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 3 more
#VU30422 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-0244
CWE-89 High
No
No
- 27.01.2020 SB2020012730
SB2015041613
SB2015031303
and 3 more
#VU40747 - Cross-Site Request Forgery (CSRF)
CVE-2015-0218
CWE-352 Medium
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40748 - Resource Management Errors
CVE-2015-0217
CWE-399 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40749 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0216
CWE-79 Low
No
No
- 01.06.2015 SB2015060105
SB2015020501
SB2015020502
#VU40750 - Exposure of sensitive information to an unauthorized actor
CVE-2015-0215
CWE-200 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40751 - Permissions, Privileges, and Access Controls
CVE-2015-0214
CWE-264 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40752 - Cross-Site Request Forgery (CSRF)
CVE-2015-0213
CWE-352 Medium
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40753 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-0212
CWE-79 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU40754 - Exposure of sensitive information to an unauthorized actor
CVE-2015-0211
CWE-200 Low
No
No
- 01.06.2015 SB2015060104
SB2015020501
SB2015020502
#VU32443 - Heap-based Buffer Overflow
CVE-2015-0247
CWE-122 Medium
No
No
- 17.02.2015 SB2015021702
SB2015031106
SB2015061608
and 3 more
#VU40900 - Memory corruption
CVE-2015-1462
CWE-119 Medium
No
No
- 03.02.2015 SB2015020306
SB2015021704
#VU40901 - Improper input validation
CVE-2015-1463
CWE-20 Medium
No
No
- 03.02.2015 SB2015020307
SB2015021704
#VU40902 - Memory corruption
CVE-2015-1461
CWE-119 Medium
No
No
- 03.02.2015 SB2015020308
SB2015021704
#VU32442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1433
CWE-79 Low
No
No
- 03.02.2015 SB2015020302
SB2015031105
SB2015020503
and 2 more
#VU40919 - Command injection
CVE-2014-8630
CWE-77 Low
No
No
- 01.02.2015 SB2015020102
SB2015020402
#VU40931 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-1191
CWE-22 Medium
No
No
- 21.01.2015 SB2015012105
SB2015040108
SB2015013102
and 2 more


Showing elements 261 - 280 out of 461