Known vulnerabilities in Fedora 36 - page 10

Software: Fedora
Version: 36
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1163
Public exploits: 40
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 36 Fedora 36 is affected by 1163 vulnerabilities: 15 critical, 294 high, 545 medium, 309 low Critical High Medium Low

Vulnerabilities (1163)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79636 - Exposure of resource to wrong sphere
CVE-2023-26081
CWE-668 Medium
No
No
- 16.08.2023 SB20230816236
SB20230816238
SB20230816239
and 2 more
#VU74843 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-0778
CWE-367 Medium
No
No
- 11.04.2023 SB2023041130
SB2023041131
SB2023051738
and 10 more
#VU72707 - Out-of-bounds read
CVE-2023-1018
CWE-125 Medium
No
No
- 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 17 more
#VU72706 - Out-of-bounds write
CVE-2023-1017
CWE-787 High
No
No
- 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 16 more
#VU72649 - Integer overflow
CVE-2023-25155
CWE-190 Low
No
No
- 01.03.2023 SB2023030105
SB2023031014
SB2023031036
and 20 more
#VU72557 - Memory corruption
CVE-2022-4904
CWE-119 Low
No
No
- 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 38 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
- 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25725
CWE-444 Medium
No
No
- 16.02.2023 SB2023021659
SB2023021662
SB2023021663
and 22 more
#VU72330 - Resource exhaustion
CVE-2023-24580
CWE-400 Medium
No
No
- 16.02.2023 SB2023021645
SB2023021648
SB2023031032
and 15 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Public exploit available
No
- 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032
CWE-122 Critical
No
No
- 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more
#VU72161 - Type confusion
CVE-2023-23529
CWE-843 Critical
No
Exploited
- 13.02.2023 SB2023021339
SB2023021340
SB2023021341
and 18 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361
CWE-326 Medium
No
No
- 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU72036 - Error Handling
CVE-2023-23931
CWE-388 Low
No
No
- 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU71431 - Improper input validation
CVE-2023-0056
CWE-20 Medium
No
No
- 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU70620 - Improper input validation
CVE-2022-23524
CWE-20 Medium
No
No
- 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 7 more
#VU70618 - Improper input validation
CVE-2022-23526
CWE-20 Medium
No
No
- 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 9 more
#VU67893 - Improper input validation
CVE-2022-41323
CWE-20 Medium
No
No
- 04.10.2022 SB2022100415
SB2022100429
SB2022101602
and 9 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
- 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU65327 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-31081
CWE-444 Medium
No
No
- 14.07.2022 SB2022071425
SB2022071426
SB2022071826
and 14 more


Showing elements 181 - 200 out of 1163