Known vulnerabilities in Fedora 21 - page 18

Software: Fedora
Version: 21
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 461
Public exploits: 30
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 21 Fedora 21 is affected by 461 vulnerabilities: 3 critical, 59 high, 255 medium, 144 low Critical High Medium Low

Vulnerabilities (461)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU39310 - Command injection
CVE-2014-9114
CWE-77 Low
No
No
- 31.03.2017 SB2016120604
SB2014112703
#VU444 - Improper Access Control
CVE-2014-9016
CWE-284 Low
Public exploit available
No
- 14.09.2016 SB2014112001
SB2015092610
SB2014112005
and 3 more
#VU443 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2014-9015
CWE-113 Low
No
No
- 14.09.2016 SB2014112001
SB2015092610
SB2014112005
and 6 more
#VU33291 - Heap-based Buffer Overflow
CVE-2014-8964
CWE-122 Medium
No
No
- 16.12.2014 SB2014121603
SB2015012501
SB2015052710
and 3 more
#VU32459 - Permissions, Privileges, and Access Controls
CVE-2014-6408
CWE-264 Medium
No
No
- 12.12.2014 SB2014121205
SB2015012609
SB2014112502
and 2 more
#VU32458 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-6407
CWE-59 Medium
No
No
- 12.12.2014 SB2014121204
SB2015012608
SB2014112502
and 2 more
#VU33057 - Improper input validation
CVE-2014-9130
CWE-20 Medium
No
No
- 08.12.2014 SB2015012904
SB2015021104
SB2015021105
and 8 more
#VU33058 - Use of Externally-Controlled Format String
CVE-2014-9157
CWE-134 Medium
No
No
- 03.12.2014 SB2015012709
SB2015030401
SB2015030402
and 1 more
#VU32456 - Integer underflow
CVE-2014-9087
CWE-191 Medium
No
No
- 01.12.2014 SB2014120102
SB2015012712
SB2014112608
#VU41044 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-8961
CWE-22 Low
No
No
- 30.11.2014 SB2015053101
SB2014112013
SB2014112305
#VU41045 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8960
CWE-79 Low
No
No
- 30.11.2014 SB2014113001
SB2015053101
SB2014112013
and 1 more
#VU41046 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-8959
CWE-22 Low
No
No
- 30.11.2014 SB2015053101
SB2014112013
SB2014112103
and 2 more
#VU41047 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8958
CWE-79 Low
No
No
- 30.11.2014 SB2014113001
SB2015053101
SB2014112013
and 3 more
#VU41054 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-7850
CWE-79 Low
No
No
- 28.11.2014 SB2014111901
SB2014112102
#VU7278 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6662
CWE-79 Low
No
No
- 24.11.2014 SB2012112701
SB2015072206
SB2015030501
and 4 more
#VU41064 - Improper input validation
CVE-2014-9030
CWE-20 Medium
No
No
- 24.11.2014 SB2014112402
SB2015010901
SB2015041101
and 2 more
#VU32460 - Resource Management Errors
CVE-2014-7824
CWE-399 Low
No
No
- 18.11.2014 SB2014111802
SB2015011203
SB2014121306
and 3 more
#VU32465 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7819
CWE-22 Medium
No
No
- 08.11.2014 SB2014110802
SB2014120852
SB2014120853
and 1 more
#VU41708 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-1934
CWE-59 Medium
No
No
- 08.05.2014 SB2014111908
SB2014111909
SB2014111910
#VU3374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-5312
CWE-79 Low
No
No
- 30.11.-0001 SB2012112701
SB2015092606
SB2015072206
and 8 more


Showing elements 341 - 360 out of 461