Known vulnerabilities in Fedora 22 - page 4

Software: Fedora
Version: 22
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 512
Public exploits: 38
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 22 Fedora 22 is affected by 512 vulnerabilities: 3 critical, 93 high, 244 medium, 172 low Critical High Medium Low

Vulnerabilities (512)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12259 - Resource exhaustion
CVE-2016-3672
CWE-400 Low
Public exploit available
No
- 27.04.2018 SB2016031004
SB2018041047
SB2018041056
and 4 more
#VU2016 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-8853
CWE-835 Medium
No
No
- 21.12.2016 SB2015091601
SB2016042120
#VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2113
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 16 more
#VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2112
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU236 - Authentication Bypass by Spoofing
CVE-2016-2111
CWE-290 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU234 - Resource exhaustion
CVE-2015-5370
CWE-400 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 22 more
#VU90378 - Out-of-bounds read
CVE-2016-3955
CWE-125 High
No
No
- 04.07.2016 SB2016070421
SB2016042012
SB2016042013
and 1 more
#VU40252 - Improper Link Resolution Before File Access ('Link Following')
CVE-2016-3096
CWE-59 Low
No
No
- 03.06.2016 SB2016060301
SB2016072022
SB2016041502
and 10 more
#VU32310 - Improper input validation
CVE-2016-3959
CWE-20 Medium
No
No
- 23.05.2016 SB2016052303
SB2016042604
SB2016042114
and 4 more
#VU40296 - Improper input validation
CVE-2016-2850
CWE-20 Medium
No
No
- 13.05.2016 SB2016051312
SB2017011128
SB2016050101
and 3 more
#VU33071 - Heap-based Buffer Overflow
CVE-2015-8868
CWE-122 Medium
No
No
- 06.05.2016 SB2016050603
SB2016060205
SB2016111804
and 4 more
#VU90904 - Double Free
CVE-2016-3951
CWE-415 Low
No
No
- 02.05.2016 SB2016050216
SB2016041332
SB2016041404
and 1 more
#VU91494 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-8839
CWE-362 Medium
No
No
- 02.05.2016 SB2016050220
SB2016041332
SB2016041404
and 1 more
#VU33631 - Heap-based Buffer Overflow
CVE-2016-3074
CWE-122 High
Public exploit available
No
- 26.04.2016 SB2016052312
SB2016071602
SB2016043003
and 3 more
#VU33074 - Improper input validation
CVE-2016-3961
CWE-20 Low
No
No
- 15.04.2016 SB2016050934
SB2016050935
SB2016042012
and 2 more
#VU33811 - Improper input validation
CVE-2016-3115
CWE-20 Medium
Public exploit available
No
- 22.03.2016 SB2016032202
SB2016032208
SB2016031605
and 10 more
#VU40710 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4454
CWE-89 Medium
No
No
- 17.06.2015 SB2015061702
SB2016032409
SB2016042408
and 2 more
#VU32418 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4342
CWE-89 Medium
No
No
- 17.06.2015 SB2015061701
SB2015061522
SB2016032409
and 3 more
#VU40712 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2665
CWE-79 Low
No
No
- 17.06.2015 SB2015061704
SB2016032409
SB2016042408
and 2 more


Showing elements 61 - 80 out of 512