Known vulnerabilities in Fedora 28 - page 2

Software: Fedora
Version: 28
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1155
Public exploits: 69
Known exploited (KEV): 9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 28 Fedora 28 is affected by 1155 vulnerabilities: 187 high, 230 medium, 738 low Critical High Medium Low

Vulnerabilities (1155)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26413 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20060
CWE-200 Medium
Public exploit available
No
- 26.03.2020 SB2020032626
SB2020031827
SB2019091403
and 20 more
#VU23563 - Heap-based Buffer Overflow
CVE-2019-9500
CWE-122 Low
No
No
- 12.12.2019 SB2019022016
SB2019121213
SB2019090447
and 6 more
#VU20194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8321
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 9 more
#VU20193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-8320
CWE-22 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 8 more
#VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8323
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8322
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8325
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20189 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-8324
CWE-94 Medium
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 11 more
#VU19597 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-11026
CWE-835 Low
No
No
- 01.08.2019 SB2019040911
SB2019041747
SB2019041748
and 1 more
#VU18801 - Out-of-bounds read
CVE-2019-11036
CWE-125 Low
No
No
- 14.06.2019 SB2019061403
SB2019060312
SB2019092105
and 8 more
#VU33427 - Improper Access Control
CVE-2019-2602
CWE-284 Medium
No
No
- 23.04.2019 SB2019060321
SB2019052329
SB2019052330
and 21 more
#VU33461 - Improper Access Control
CVE-2019-2698
CWE-284 High
No
No
- 23.04.2019 SB2019060321
SB2019052329
SB2019052330
and 16 more
#VU18300 - Improper input validation
CVE-2019-10913
CWE-20 Medium
No
No
- 18.04.2019 SB2019041802
SB2019051003
SB2019041827
and 7 more
#VU18299 - Deserialization of Untrusted Data
CVE-2019-10912
CWE-502 Medium
No
No
- 18.04.2019 SB2019041802
SB2019051003
SB2019062507
and 8 more
#VU18298 - Improper Authentication
CVE-2019-10911
CWE-287 Medium
No
No
- 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18297 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10910
CWE-94 High
No
No
- 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10909
CWE-79 Medium
No
No
- 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18093 - Resource exhaustion
CVE-2019-9903
CWE-400 Low
No
No
- 28.03.2019 SB2019032807
SB2019091040
SB2021120152
and 3 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Public exploit available
No
- 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14504 - Out-of-bounds write
CVE-2018-14600
CWE-787 High
No
No
- 23.08.2018 SB2018082306
SB2018082307
SB2018090302
and 7 more


Showing elements 21 - 40 out of 1155