Known vulnerabilities in Fedora 35 - page 47

Software: Fedora
Version: 35
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1362
Public exploits: 72
Known exploited (KEV): 34
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 35 Fedora 35 is affected by 1362 vulnerabilities: 21 critical, 408 high, 563 medium, 370 low Critical High Medium Low

Vulnerabilities (1362)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78667 - Out-of-bounds write
CVE-2021-45930
CWE-787 Low
No
No
- 25.07.2023 SB2022010102
SB2023072568
SB2023072625
and 15 more
#VU63920 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3773
CWE-200 Medium
Public exploit available
No
- 02.06.2022 SB2022062928
SB2022062931
SB2022070643
and 7 more
#VU63770 - Insufficient Verification of Data Authenticity
CVE-2021-4122
CWE-345 Medium
No
No
- 27.05.2022 SB2022061409
SB2022021531
SB2022082249
and 12 more
#VU61332 - NULL Pointer Dereference
CVE-2021-46059
CWE-476 Low
No
No
- 14.03.2022 SB2022031432
SB2022031433
SB2022051702
and 15 more
#VU60815 - Improper Access Control
CVE-2022-23134
CWE-284 Medium
No
Exploited
- 23.02.2022 SB2022022308
SB2022011425
SB2022011426
and 3 more
#VU60814 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23133
CWE-79 Low
No
No
- 23.02.2022 SB2022022306
SB2022011425
SB2022011426
and 3 more
#VU60812 - Permissions, Privileges, and Access Controls
CVE-2022-23132
CWE-264 Low
No
No
- 23.02.2022 SB2022022306
SB2022011425
SB2022011426
and 3 more
#VU60767 - Heap-based Buffer Overflow
CVE-2022-0158
CWE-122 High
No
No
- 22.02.2022 SB2022022220
SB2022022221
SB2022031433
and 7 more
#VU60766 - Use After Free
CVE-2022-0156
CWE-416 High
No
No
- 22.02.2022 SB2022022220
SB2022022221
SB2022031433
and 7 more
#VU59689 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21682
CWE-22 Medium
No
No
- 18.01.2022 SB2022011811
SB2022012525
SB2022110837
and 8 more
#VU59655 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2022-0217
CWE-776 Medium
Public exploit available
No
- 17.01.2022 SB2022011716
SB2022011728
SB2022011420
and 4 more
#VU59654 - Permissions, Privileges, and Access Controls
CVE-2021-43860
CWE-264 Medium
No
No
- 17.01.2022 SB2022011715
SB2022012525
SB2022051141
and 8 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824
CWE-94 Medium
No
No
- 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59550 - Improper Certificate Validation
CVE-2021-44533
CWE-295 Medium
No
No
- 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU59549 - Improper Validation of Certificate with Host Mismatch
CVE-2021-44532
CWE-297 Medium
No
No
- 12.01.2022 SB2022011216
SB2022041522
SB2022042806
and 36 more
#VU59548 - Improper Certificate Validation
CVE-2021-44531
CWE-295 Medium
No
No
- 12.01.2022 SB2022011216
SB2022032010
SB2022041522
and 35 more
#VU59521 - NULL Pointer Dereference
CVE-2022-23094
CWE-476 Medium
No
No
- 12.01.2022 SB2022011205
SB2022011729
SB2022012029
and 6 more
#VU59121 - Improper input validation
CVE-2021-4183
CWE-20 Medium
No
No
- 30.12.2021 SB2021123001
SB2022101709
SB2022021434
and 2 more
#VU59120 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-4182
CWE-835 Medium
No
No
- 30.12.2021 SB2021123001
SB2022101709
SB2022021434
and 4 more
#VU59119 - Improper input validation
CVE-2021-4181
CWE-20 Medium
No
No
- 30.12.2021 SB2021123001
SB2022101709
SB2022021434
and 4 more


Showing elements 921 - 940 out of 1362