Known vulnerabilities in Fedora 23 - page 16

Software: Fedora
Version: 23
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 559
Public exploits: 38
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 23 Fedora 23 is affected by 559 vulnerabilities: 4 critical, 107 high, 246 medium, 202 low Critical High Medium Low

Vulnerabilities (559)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33987 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2016-3116
CWE-93 Medium
Public exploit available
No
- 05.08.2020 SB2016032204
SB2016032207
SB2016072025
and 8 more
#VU242 - UNIX Symbolic Link (Symlink) Following
CVE-2015-7560
CWE-61 Medium
No
No
- 29.07.2016 SB2016032901
SB2016032401
SB2016032102
and 12 more
#VU40268 - Permissions, Privileges, and Access Controls
CVE-2016-2190
CWE-264 Medium
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40269 - Improper Access Control
CVE-2016-2159
CWE-284 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40270 - Exposure of sensitive information to an unauthorized actor
CVE-2016-2158
CWE-200 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40271 - Cross-Site Request Forgery (CSRF)
CVE-2016-2157
CWE-352 High
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40272 - Exposure of sensitive information to an unauthorized actor
CVE-2016-2156
CWE-200 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40273 - Permissions, Privileges, and Access Controls
CVE-2016-2155
CWE-264 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40274 - Exposure of sensitive information to an unauthorized actor
CVE-2016-2154
CWE-200 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40275 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2153
CWE-79 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU40276 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2152
CWE-79 Low
No
No
- 22.05.2016 SB2016052203
SB2016031407
SB2016031408
and 3 more
#VU32318 - Heap-based Buffer Overflow
CVE-2016-2324
CWE-122 High
No
No
- 08.04.2016 SB2016040807
SB2016031701
SB2016031702
and 10 more
#VU32317 - Heap-based Buffer Overflow
CVE-2016-2315
CWE-122 High
No
No
- 08.04.2016 SB2016040806
SB2016031701
SB2016031702
and 10 more
#VU32323 - Heap-based Buffer Overflow
CVE-2016-2851
CWE-122 High
Public exploit available
No
- 08.04.2016 SB2016040809
SB2016031010
SB2016030906
and 4 more
#VU33628 - Improper input validation
CVE-2016-3119
CWE-20 Medium
No
No
- 26.03.2016 SB2016050518
SB2017020665
SB2016031810
and 3 more
#VU33811 - Improper input validation
CVE-2016-3115
CWE-20 Medium
Public exploit available
No
- 22.03.2016 SB2016032202
SB2016032208
SB2016031605
and 10 more
#VU40414 - Memory corruption
CVE-2016-1621
CWE-119 High
No
No
- 12.03.2016 SB2016031203
SB2016031607
#VU31831 - Improper input validation
CVE-2016-2088
CWE-20 Medium
No
No
- 10.03.2016 SB2016031007
SB2016031013
SB2016031121
and 2 more
#VU32322 - Improper input validation
CVE-2016-1286
CWE-20 High
No
No
- 10.03.2016 SB2016031009
SB2016032303
SB2016031804
and 14 more
#VU32321 - Improper input validation
CVE-2016-1285
CWE-20 Medium
No
No
- 10.03.2016 SB2016031008
SB2016032303
SB2016031804
and 14 more


Showing elements 301 - 320 out of 559