Known vulnerabilities in Fedora 36 - page 25

Software: Fedora
Version: 36
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1163
Public exploits: 40
Known exploited (KEV): 16
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 36 Fedora 36 is affected by 1163 vulnerabilities: 15 critical, 294 high, 545 medium, 309 low Critical High Medium Low

Vulnerabilities (1163)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68376 - Integer overflow
CVE-2022-3515
CWE-190 High
No
No
- 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU68313 - Use After Free
CVE-2022-42719
CWE-416 High
No
No
- 14.10.2022 SB2022101413
SB2022101707
SB2022101712
and 37 more
#VU68311 - Memory corruption
CVE-2022-41674
CWE-119 High
No
No
- 14.10.2022 SB2022101412
SB2022101707
SB2022101712
and 49 more
#VU65633 - Exposure of sensitive information to an unauthorized actor
CVE-2022-25275
CWE-200 Medium
No
No
- 21.07.2022 SB2022072109
SB2022072113
SB2022101515
and 3 more
#VU63344 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-29221
CWE-94 High
Public exploit available
No
- 17.05.2022 SB2022051727
SB2022053020
SB2022092631
and 5 more
#VU61665 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21408
CWE-94 Medium
No
No
- 28.03.2022 SB2022032834
SB2022032835
SB2022053020
and 4 more
#VU61664 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-29454
CWE-94 High
No
No
- 28.03.2022 SB2022032833
SB2022032835
SB2022053020
and 4 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729
CWE-185 Low
No
No
- 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU61426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24728
CWE-79 Low
No
No
- 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 12 more
#VU60672 - Improper input validation
CVE-2022-25271
CWE-20 Medium
No
No
- 16.02.2022 SB2022021627
SB2022021628
SB2022101515
and 3 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182
CWE-79 Medium
No
No
- 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184
CWE-79 Medium
Public exploit available
No
- 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183
CWE-79 Medium
No
No
- 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU58220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41164
CWE-79 Medium
No
No
- 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 6 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165
CWE-79 Medium
No
No
- 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU54495 - Protection Mechanism Failure
CVE-2021-35368
CWE-693 Medium
No
No
- 01.07.2021 SB2021070111
SB2021070112
SB2021070807
and 4 more
#VU50870 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26120
CWE-94 Medium
Public exploit available
No
- 23.02.2021 SB2021022311
SB2021052605
SB2022032835
and 4 more
#VU50869 - Permissions, Privileges, and Access Controls
CVE-2021-26119
CWE-264 Medium
Public exploit available
No
- 23.02.2021 SB2021022311
SB2021052605
SB2022032835
and 4 more
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103
CWE-79 Low
No
No
- 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more
#VU3374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-5312
CWE-79 Low
No
No
- 30.11.-0001 SB2012112701
SB2015092606
SB2015072206
and 8 more


Showing elements 481 - 500 out of 1163