Known vulnerabilities in Fedora 23 - page 14

Software: Fedora
Version: 23
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 559
Public exploits: 38
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 23 Fedora 23 is affected by 559 vulnerabilities: 4 critical, 107 high, 246 medium, 202 low Critical High Medium Low

Vulnerabilities (559)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12259 - Resource exhaustion
CVE-2016-3672
CWE-400 Low
Public exploit available
No
- 27.04.2018 SB2016031004
SB2018041047
SB2018041056
and 4 more
#VU640 - Improper input validation
CVE-2016-2105
CWE-20 Low
No
No
- 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU234 - Resource exhaustion
CVE-2015-5370
CWE-400 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 22 more
#VU90378 - Out-of-bounds read
CVE-2016-3955
CWE-125 High
No
No
- 04.07.2016 SB2016070421
SB2016042012
SB2016042013
and 1 more
#VU40252 - Improper Link Resolution Before File Access ('Link Following')
CVE-2016-3096
CWE-59 Low
No
No
- 03.06.2016 SB2016060301
SB2016072022
SB2016041502
and 10 more
#VU32310 - Improper input validation
CVE-2016-3959
CWE-20 Medium
No
No
- 23.05.2016 SB2016052303
SB2016042604
SB2016042114
and 4 more
#VU40296 - Improper input validation
CVE-2016-2850
CWE-20 Medium
No
No
- 13.05.2016 SB2016051312
SB2017011128
SB2016050101
and 3 more
#VU40297 - Exposure of sensitive information to an unauthorized actor
CVE-2016-2849
CWE-200 Medium
No
No
- 13.05.2016 SB2016051312
SB2017011128
SB2016050101
and 3 more
#VU40301 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7827
CWE-200 Medium
No
No
- 13.05.2016 SB2016051312
SB2016050101
SB2016050102
and 2 more
#VU33071 - Heap-based Buffer Overflow
CVE-2015-8868
CWE-122 Medium
No
No
- 06.05.2016 SB2016050603
SB2016060205
SB2016111804
and 4 more
#VU33809 - Improper input validation
CVE-2016-2106
CWE-20 Medium
No
No
- 05.05.2016 SB2016050513
SB2016051903
SB2016051204
and 21 more
#VU90904 - Double Free
CVE-2016-3951
CWE-415 Low
No
No
- 02.05.2016 SB2016050216
SB2016041332
SB2016041404
and 1 more
#VU91494 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-8839
CWE-362 Medium
No
No
- 02.05.2016 SB2016050220
SB2016041332
SB2016041404
and 1 more
#VU33631 - Heap-based Buffer Overflow
CVE-2016-3074
CWE-122 High
Public exploit available
No
- 26.04.2016 SB2016052312
SB2016071602
SB2016043003
and 3 more
#VU33074 - Improper input validation
CVE-2016-3961
CWE-20 Low
No
No
- 15.04.2016 SB2016050934
SB2016050935
SB2016042012
and 2 more
#VU33811 - Improper input validation
CVE-2016-3115
CWE-20 Medium
Public exploit available
No
- 22.03.2016 SB2016032202
SB2016032208
SB2016031605
and 10 more
#VU40710 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4454
CWE-89 Medium
No
No
- 17.06.2015 SB2015061702
SB2016032409
SB2016042408
and 2 more
#VU32418 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4342
CWE-89 Medium
No
No
- 17.06.2015 SB2015061701
SB2015061522
SB2016032409
and 3 more
#VU40712 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2665
CWE-79 Low
No
No
- 17.06.2015 SB2015061704
SB2016032409
SB2016042408
and 2 more


Showing elements 261 - 280 out of 559