Known vulnerabilities in Fedora 21 - page 9

Software: Fedora
Version: 21
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 461
Public exploits: 30
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 21 Fedora 21 is affected by 461 vulnerabilities: 3 critical, 59 high, 255 medium, 144 low Critical High Medium Low

Vulnerabilities (461)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34852 - Improper input validation
CVE-2015-2928
CWE-20 Medium
No
No
- 24.01.2020 SB2020012426
SB2015070607
SB2015040702
and 4 more
#VU35016 - Improper input validation
CVE-2015-1855
CWE-20 Medium
No
No
- 29.11.2019 SB2019112918
SB2015052705
SB2015052706
and 5 more
#VU16119 - Integer underflow
CVE-2015-4021
CWE-191 Low
No
No
- 27.11.2018 SB2015070601
SB2015060301
SB2015060304
and 4 more
#VU16114 - Buffer over-read
CVE-2015-2783
CWE-126 Low
No
No
- 27.11.2018 SB2015042001
SB2015041703
SB2015042204
and 2 more
#VU16109 - Stack-based buffer overflow
CVE-2015-3329
CWE-121 High
No
No
- 27.11.2018 SB2015042001
SB2015041701
SB2015041702
and 3 more
#VU16105 - NULL Pointer Dereference
CVE-2015-1352
CWE-476 Low
No
No
- 27.11.2018 SB2015021701
SB2015041701
SB2015041702
and 4 more
#VU14904 - Improper Access Control
CVE-2015-3306
CWE-284 High
Public exploit available
No
- 23.09.2018 SB2015051803
SB2015042202
SB2015092644
and 3 more
#VU7690 - Out-of-bounds read
CVE-2015-3622
CWE-125 Low
No
No
- 03.08.2017 SB2017080111
SB2015051101
SB2015050801
and 6 more
#VU5580 - Memory corruption
CVE-2015-3456
CWE-119 Critical
Public exploit available
No
- 01.02.2017 SB2015050601
SB2015051401
SB2015092603
and 24 more
#VU111724 - Resource Management Errors
CVE-2015-1868
CWE-399 Medium
No
No
- 28.12.2016 SB2016122823
SB2015042314
SB2015042702
and 7 more
#VU1004 - Buffer overflow
CVE-2015-3885
CWE-120 Low
No
No
- 17.10.2016 SB2017012302
SB2017062025
SB2015051105
and 13 more
#VU40680 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-3439
CWE-79 Low
No
No
- 05.08.2015 SB2015042307
SB2015042308
SB2015042309
and 2 more
#VU40681 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-3438
CWE-79 Low
No
No
- 05.08.2015 SB2015080502
SB2015042307
SB2015042308
and 3 more
#VU40684 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-3440
CWE-79 Low
Public exploit available
No
- 03.08.2015 SB2015080304
SB2015042307
SB2015042308
and 3 more
#VU40761 - Cryptographic Issues
CVE-2015-3903
CWE-310 Medium
No
No
- 26.05.2015 SB2015052604
SB2015051411
SB2015051412
and 3 more
#VU40762 - Cross-Site Request Forgery (CSRF)
CVE-2015-3902
CWE-352 Medium
No
No
- 26.05.2015 SB2015052604
SB2015051411
SB2015051412
and 3 more
#VU32374 - Permissions, Privileges, and Access Controls
CVE-2015-2694
CWE-264 Medium
No
No
- 25.05.2015 SB2015052502
SB2015120103
SB2015121405
and 2 more
#VU32294 - Heap-based Buffer Overflow
CVE-2015-1863
CWE-122 Medium
No
No
- 28.04.2015 SB2015042803
SB2015051901
SB2015051902
and 4 more
#VU32452 - Improper input validation
CVE-2014-5353
CWE-20 Low
No
No
- 17.12.2014 SB2014121702
SB2015013012
SB2015050506
and 3 more
#VU3380 - Use After Free
CVE-2015-1351
CWE-416 Low
No
No
- 30.11.-0001 SB2015021701
SB2015041701
SB2015041702
and 5 more


Showing elements 161 - 180 out of 461