Known vulnerabilities in Fedora 23 - page 10

Software: Fedora
Version: 23
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 559
Public exploits: 38
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 23 Fedora 23 is affected by 559 vulnerabilities: 4 critical, 107 high, 246 medium, 202 low Critical High Medium Low

Vulnerabilities (559)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53699 - Memory corruption
CVE-2016-6160
CWE-119 Medium
No
No
- 01.06.2021 SB2017012331
SB2016070713
SB2016070714
and 4 more
#VU33986 - Improper Authentication
CVE-2016-5008
CWE-287 Medium
No
No
- 05.08.2020 SB2016071316
SB2016071919
SB2016071921
and 1 more
#VU20302 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-6232
CWE-22 Medium
No
No
- 19.08.2019 SB2019081903
SB2016080205
SB2016072605
and 5 more
#VU38129 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-8239
CWE-362 Low
No
No
- 10.10.2017 SB2017101040
SB2016071152
SB2016071153
#VU32267 - Out-of-bounds read
CVE-2016-6262
CWE-125 Medium
No
No
- 07.09.2016 SB2016090709
SB2016080536
SB2016072216
and 3 more
#VU32270 - Out-of-bounds read
CVE-2016-6261
CWE-125 Medium
No
No
- 07.09.2016 SB2016090712
SB2016080535
SB2016072216
and 3 more
#VU357 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-5696
CWE-300 Low
Public exploit available
No
- 07.09.2016 SB2016082101
SB2016081703
SB2016081403
and 12 more
#VU346 - Server-Side Request Forgery (SSRF)
CVE-2016-5385
CWE-918 High
No
No
- 27.08.2016 SB2016071801
SB2016081103
SB2016081104
and 11 more
#VU337 - Improper Access Control
CVE-2016-5387
CWE-284 Medium
No
No
- 20.08.2016 SB2016080101
SB2016122101
SB2016071805
and 12 more
#VU90377 - Out-of-bounds read
CVE-2016-6156
CWE-125 Medium
No
No
- 06.08.2016 SB2016080602
SB2016071238
SB2016071239
#VU255 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6210
CWE-200 Medium
Public exploit available
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 16 more
#VU215 - Memory corruption
CVE-2016-6250
CWE-119 High
No
No
- 26.07.2016 SB2016072608
SB2016080530
SB2016072027
and 3 more
#VU194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5385
CWE-79 High
No
No
- 22.07.2016 SB2016072001
SB2016072206
SB2016081103
and 14 more
#VU165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6186
CWE-79 High
Public exploit available
No
- 19.07.2016 SB2016071907
SB2016072204
SB2016072205
and 9 more
#VU33632 - Improper Access Control
CVE-2016-5386
CWE-284 High
No
No
- 19.07.2016 SB2016072018
SB2016081709
SB2023022232
and 6 more
#VU114 - Improper Neutralization of Parameter/Argument Delimiters
CVE-2016-6185
CWE-141 High
No
No
- 11.07.2016 SB2016072502
SB2016071110
SB2016071116
and 3 more
#VU91 - Improper Authentication
CVE-2016-4979
CWE-287 Medium
No
No
- 06.07.2016 SB2016070601
SB2016070712
SB2016070808
#VU40214 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-6130
CWE-362 Low
No
No
- 04.07.2016 SB2016070416
SB2016071239
#VU32274 - Improper input validation
CVE-2015-8899
CWE-20 Medium
No
No
- 30.06.2016 SB2016063013
SB2017010306
SB2016122312
and 7 more
#VU32337 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7511
CWE-200 Low
No
No
- 20.04.2016 SB2016042002
SB2016021803
SB2016022312
and 2 more


Showing elements 181 - 200 out of 559