Known vulnerabilities in Fedora 35 - page 43

Software: Fedora
Version: 35
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1362
Public exploits: 72
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 35 Fedora 35 is affected by 1362 vulnerabilities: 21 critical, 408 high, 563 medium, 370 low Critical High Medium Low

Vulnerabilities (1362)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72631 - Stack-based buffer overflow
CVE-2021-43519
CWE-121 Medium
No
No
- 28.02.2023 SB2021110953
SB2023022866
SB2023031437
and 4 more
#VU60988 - Memory corruption
CVE-2022-0330
CWE-119 Low
No
No
- 03.03.2022 SB2022030318
SB2022030319
SB2022030320
and 58 more
#VU60772 - Heap-based Buffer Overflow
CVE-2022-0359
CWE-122 High
No
No
- 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 30 more
#VU60771 - Memory corruption
CVE-2022-0351
CWE-119 High
No
No
- 22.02.2022 SB2022022220
SB2022022221
SB2022060217
and 23 more
#VU60291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-23959
CWE-444 Medium
No
No
- 03.02.2022 SB2022020331
SB2022020415
SB2022020416
and 14 more
#VU60187 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-44141
CWE-59 Low
No
No
- 31.01.2022 SB2022013112
SB2022072819
SB2022121502
and 12 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Public exploit available
No
- 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU60185 - Insufficient Verification of Data Authenticity
CVE-2022-0336
CWE-345 Low
No
No
- 31.01.2022 SB2022013110
SB2022021417
SB2022041954
and 10 more
#VU60167 - Use After Free
CVE-2022-24122
CWE-416 Low
Public exploit available
No
- 31.01.2022 SB2022013102
SB2022020942
SB2022020225
and 1 more
#VU130487 - Improper Output Neutralization for Logs
CVE-2022-23949
CWE-117 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130485 - Improper Access Control
CVE-2022-23950
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130484 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2022-23951
CWE-409 Medium
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130488 - Improper Access Control
CVE-2022-23948
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130483 - Incorrect Permission Assignment for Critical Resource
CVE-2022-23952
CWE-732 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130489 - Authentication Bypass by Spoofing
CVE-2021-43310
CWE-290 High
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU59831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0157
CWE-79 Low
No
No
- 19.01.2022 SB2022011923
SB2022020196
SB2022020197
and 3 more
#VU59830 - Cross-Site Request Forgery (CSRF)
CVE-2022-0197
CWE-352 Low
No
No
- 19.01.2022 SB2022011923
SB2022020196
SB2022020197
and 3 more
#VU59829 - Cross-Site Request Forgery (CSRF)
CVE-2022-0196
CWE-352 Low
No
No
- 19.01.2022 SB2022011923
SB2022020196
SB2022020197
and 3 more
#VU59828 - Cross-Site Request Forgery (CSRF)
CVE-2022-0238
CWE-352 Low
No
No
- 19.01.2022 SB2022011923
SB2022020196
SB2022020197
and 3 more
#VU59737 - Improper input validation
CVE-2022-21363
CWE-20 Medium
No
No
- 19.01.2022 SB2022011904
SB2022060838
SB2022100554
and 5 more


Showing elements 841 - 860 out of 1362