Known vulnerabilities in Fedora 28 - page 2

Software: Fedora
Version: 28
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1155
Public exploits: 69
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 28 Fedora 28 is affected by 1155 vulnerabilities: 187 high, 230 medium, 738 low Critical High Medium Low

Vulnerabilities (1155)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26413 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20060
CWE-200 Medium
Public exploit available
No
- 26.03.2020 SB2020032626
SB2020031827
SB2019091403
and 20 more
#VU23563 - Heap-based Buffer Overflow
CVE-2019-9500
CWE-122 Low
No
No
- 12.12.2019 SB2019022016
SB2019121213
SB2019090447
and 6 more
#VU20194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8321
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 9 more
#VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8323
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8322
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8325
CWE-79 Low
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 10 more
#VU20189 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-8324
CWE-94 Medium
No
No
- 13.08.2019 SB2019081320
SB2019061706
SB2019072108
and 11 more
#VU19597 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-11026
CWE-835 Low
No
No
- 01.08.2019 SB2019040911
SB2019041747
SB2019041748
and 1 more
#VU19042 - Out-of-bounds read
CVE-2019-11373
CWE-125 Medium
No
No
- 08.07.2019 SB2019070804
SB2019070805
SB2019081428
and 10 more
#VU19041 - Out-of-bounds read
CVE-2019-11372
CWE-125 Low
No
No
- 08.07.2019 SB2019070804
SB2019070805
SB2019081428
and 10 more
#VU33427 - Improper Access Control
CVE-2019-2602
CWE-284 Medium
No
No
- 23.04.2019 SB2019060321
SB2019052329
SB2019052330
and 21 more
#VU33461 - Improper Access Control
CVE-2019-2698
CWE-284 High
No
No
- 23.04.2019 SB2019060321
SB2019052329
SB2019052330
and 16 more
#VU18300 - Improper input validation
CVE-2019-10913
CWE-20 Medium
No
No
- 18.04.2019 SB2019041802
SB2019051003
SB2019041827
and 7 more
#VU18299 - Deserialization of Untrusted Data
CVE-2019-10912
CWE-502 Medium
No
No
- 18.04.2019 SB2019041802
SB2019051003
SB2019062507
and 8 more
#VU18298 - Improper Authentication
CVE-2019-10911
CWE-287 Medium
No
No
- 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18297 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10910
CWE-94 High
No
No
- 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10909
CWE-79 Medium
No
No
- 17.04.2019 SB2019041705
SB2019041802
SB2019051003
and 11 more
#VU18093 - Resource exhaustion
CVE-2019-9903
CWE-400 Low
No
No
- 28.03.2019 SB2019032807
SB2019091040
SB2021120152
and 3 more
#VU14505 - Improper input validation
CVE-2018-14598
CWE-20 Low
No
No
- 23.08.2018 SB2018082306
SB2018082307
SB2018090302
and 7 more
#VU14504 - Out-of-bounds write
CVE-2018-14600
CWE-787 High
No
No
- 23.08.2018 SB2018082306
SB2018082307
SB2018090302
and 7 more


Showing elements 21 - 40 out of 1155