Known vulnerabilities in Fedora 25 - page 28

Software: Fedora
Version: 25
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1035
Public exploits: 73
Known exploited (KEV): 10

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 25 Fedora 25 is affected by 1035 vulnerabilities: 3 critical, 265 high, 271 medium, 496 low Critical High Medium Low

Vulnerabilities (1035)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13180 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-5662
CWE-611 Low
No
No
- 05.06.2018 SB2018060503
SB2017050924
SB2023071416
and 7 more
#VU12609 - Heap-based Buffer Overflow
CVE-2016-10317
CWE-122 Low
No
No
- 14.05.2018 SB2017112136
SB2017050318
SB2017050319
and 1 more
#VU12297 - Incorrect Permission Assignment for Critical Resource
CVE-2016-9604
CWE-732 Low
No
No
- 30.04.2018 SB2017041804
SB2017052515
SB2017042851
and 1 more
#VU11097 - Buffer overflow
CVE-2017-8073
CWE-120 Low
No
No
- 15.03.2018 SB2017042301
SB2017042803
SB2017042516
and 7 more
#VU11095 - Heap-based Buffer Overflow
CVE-2017-8287
CWE-122 High
No
No
- 15.03.2018 SB2017051611
SB2017050922
SB2017051021
and 8 more
#VU11094 - Heap-based Buffer Overflow
CVE-2017-8105
CWE-122 High
No
No
- 15.03.2018 SB2017051611
SB2017050922
SB2017051021
and 7 more
#VU10724 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7889
CWE-200 Low
No
No
- 26.02.2018 SB2018022308
SB2018022309
SB2017042434
and 2 more
#VU37806 - Improper input validation
CVE-2017-0873
CWE-20 Medium
No
No
- 06.12.2017 SB2017120647
SB2017043004
SB2017043005
and 1 more
#VU7478 - Permissions, Privileges, and Access Controls
CVE-2017-8114
CWE-264 Low
No
No
- 12.07.2017 SB2017042801
SB2017042841
SB2017042845
and 3 more
#VU6708 - NULL Pointer Dereference
CVE-2017-5951
CWE-476 Medium
No
No
- 25.05.2017 SB2017052502
SB2017041001
SB2017042902
and 6 more
#VU6659 - Improper input validation
CVE-2017-7645
CWE-20 Medium
No
No
- 23.05.2017 SB2017051904
SB2017062915
SB2017091510
and 20 more
#VU6612 - Heap-based Buffer Overflow
CVE-2017-7477
CWE-122 Medium
No
No
- 22.05.2017 SB2017052202
SB2017062915
SB2017051605
and 5 more
#VU6596 - Command injection
CVE-2017-7692
CWE-77 High
Public exploit available
No
- 17.05.2017 SB2017051703
SB2017091701
SB2017051301
and 5 more
#VU6546 - Type conversion
CVE-2017-8291
CWE-704 Critical
Public exploit available
Exploited
- 15.05.2017 SB2017051503
SB2017052502
SB2017042603
and 11 more
#VU7286 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0372
CWE-79 Low
Public exploit available
No
- 29.04.2017 SB2017042901
SB2017040706
SB2017040707
and 1 more
#VU33536 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7704
CWE-835 Medium
No
No
- 13.04.2017 SB2017041306
SB2017042812
SB2017060660
and 1 more
#VU33532 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7700
CWE-835 Medium
No
No
- 13.04.2017 SB2017041302
SB2017042808
SB2017060660
and 1 more
#VU33533 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7701
CWE-835 Medium
No
No
- 13.04.2017 SB2017041303
SB2017042809
SB2017060660
and 1 more
#VU33534 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-7702
CWE-835 Medium
No
No
- 13.04.2017 SB2017041304
SB2017042810
SB2017072610
and 2 more
#VU33535 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2017-7703
CWE-74 Medium
No
No
- 13.04.2017 SB2017041305
SB2017042811
SB2017060660
and 1 more


Showing elements 541 - 560 out of 1035