Known vulnerabilities in Fedora 22 - page 7

Software: Fedora
Version: 22
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 512
Public exploits: 38
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 22 Fedora 22 is affected by 512 vulnerabilities: 3 critical, 93 high, 244 medium, 172 low Critical High Medium Low

Vulnerabilities (512)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87536 - Cross-Site Request Forgery (CSRF)
CVE-2015-5351
CWE-352 Medium
No
No
- 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 5 more
#VU87535 - Session Fixation
CVE-2015-5346
CWE-384 High
No
No
- 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU87534 - Permissions, Privileges, and Access Controls
CVE-2016-0763
CWE-264 Medium
No
No
- 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU82376 - Memory corruption
CVE-2016-0799
CWE-119 High
No
No
- 25.10.2023 SB2016050811
SB2016042403
SB2016030305
and 8 more
#VU1605 - Information Exposure Through Timing Discrepancy
CVE-2016-2513
CWE-208 Low
No
No
- 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU1603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2512
CWE-79 Low
No
No
- 21.12.2016 SB2016030103
SB2016030701
SB2016030702
and 13 more
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714
CWE-94 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706
CWE-200 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345
CWE-200 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174
CWE-22 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU242 - UNIX Symbolic Link (Symlink) Following
CVE-2015-7560
CWE-61 Medium
No
No
- 29.07.2016 SB2016032901
SB2016032401
SB2016032102
and 12 more
#VU34 - Use of Potentially Dangerous Function
CVE-2016-1531
CWE-250 Low
Public exploit available
No
- 28.06.2016 SB2016030302
SB2017083110
SB2016031002
and 7 more
#VU32323 - Heap-based Buffer Overflow
CVE-2016-2851
CWE-122 High
Public exploit available
No
- 08.04.2016 SB2016040809
SB2016031010
SB2016030906
and 4 more
#VU40410 - Security Features
CVE-2016-3125
CWE-254 Medium
No
No
- 05.04.2016 SB2016040501
SB2016031117
SB2016031118
and 4 more
#VU8567 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-2098
CWE-94 High
Public exploit available
No
- 16.03.2016 SB2016031601
SB2016031003
SB2016032301
and 7 more
#VU40432 - Improper input validation
CVE-2016-2562
CWE-20 Medium
No
No
- 01.03.2016 SB2016030105
SB2016030309
SB2016030310
and 3 more
#VU40433 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2561
CWE-79 Low
No
No
- 01.03.2016 SB2016030105
SB2016030309
SB2016030310
and 3 more
#VU40434 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2560
CWE-79 Low
No
No
- 01.03.2016 SB2016030105
SB2016030309
SB2016030310
and 3 more
#VU40435 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2559
CWE-79 Low
No
No
- 01.03.2016 SB2016030105
SB2016030309
SB2016030310
and 3 more
#VU33604 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-8557
CWE-78 High
No
No
- 08.01.2016 SB2016062804
SB2015121402
SB2016120404
and 3 more


Showing elements 121 - 140 out of 512