Known vulnerabilities in Fedora 37 - page 3

Software: Fedora
Version: 37
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1280
Public exploits: 52
Known exploited (KEV): 23
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 37 Fedora 37 is affected by 1280 vulnerabilities: 21 critical, 333 high, 604 medium, 322 low Critical High Medium Low

Vulnerabilities (1280)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82989 - Improper input validation
CVE-2023-39456
CWE-20 Medium
No
No
- 10.11.2023 SB2023111062
SB2023111063
SB2023111065
and 6 more
#VU82988 - Exposure of sensitive information to an unauthorized actor
CVE-2023-41752
CWE-200 Medium
No
No
- 10.11.2023 SB2023111062
SB2023111063
SB2023111065
and 5 more
#VU82987 - Memory corruption
CVE-2023-43907
CWE-119 High
No
No
- 10.11.2023 SB2023111061
SB2023111076
SB2023111077
and 7 more
#VU82986 - Heap-based Buffer Overflow
CVE-2023-5686
CWE-122 High
No
No
- 10.11.2023 SB2023111060
SB2023111071
SB2023111072
and 3 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803
CWE-200 Medium
No
No
- 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82944 - UNIX Symbolic Link (Symlink) Following
CVE-2023-34049
CWE-61 Low
No
No
- 09.11.2023 SB2023110931
SB2023110932
SB2023110933
and 17 more
#VU82893 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47272
CWE-79 Medium
No
No
- 07.11.2023 SB2023110748
SB2023110749
SB2023110750
and 4 more
#VU82891 - Out-of-bounds read
CVE-2023-41359
CWE-125 Medium
No
No
- 07.11.2023 SB2023091371
SB2023110753
SB2023110754
and 3 more
#VU82396 - Improper input validation
CVE-2023-42852
CWE-20 High
No
No
- 25.10.2023 SB2023102566
SB2023102572
SB2023102573
and 27 more
#VU82316 - Improper Handling of Structural Elements
CVE-2023-5824
CWE-237 Medium
No
No
- 24.10.2023 SB2023102416
SB2023110745
SB2023110746
and 21 more
#VU82315 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46846
CWE-444 Medium
No
No
- 24.10.2023 SB2023102416
SB2023110745
SB2023110746
and 25 more
#VU82313 - Memory corruption
CVE-2023-46847
CWE-119 Medium
No
No
- 24.10.2023 SB2023102416
SB2023110745
SB2023110746
and 30 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
- 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81446 - Out-of-bounds read
CVE-2023-41360
CWE-125 Medium
No
No
- 03.10.2023 SB2023091371
SB2023100349
SB2023101732
and 7 more
#VU81445 - NULL Pointer Dereference
CVE-2023-41909
CWE-476 Medium
No
No
- 03.10.2023 SB2023091371
SB2023100349
SB2023100350
and 9 more
#VU81444 - Improper input validation
CVE-2023-41358
CWE-20 Medium
No
No
- 03.10.2023 SB2023091371
SB2023100349
SB2023100350
and 13 more
#VU80766 - Improper input validation
CVE-2023-38802
CWE-20 Medium
No
No
- 13.09.2023 SB2023091371
SB2023091372
SB2023091860
and 21 more
#VU79759 - Heap-based Buffer Overflow
CVE-2023-4322
CWE-122 High
No
No
- 21.08.2023 SB2023082117
SB2023111071
SB2023111072
and 3 more
#VU76911 - Improper input validation
CVE-2023-31490
CWE-20 Medium
No
No
- 05.06.2023 SB2023050410
SB2023060533
SB2023061528
and 10 more
#VU76910 - Improper input validation
CVE-2023-31489
CWE-20 Medium
No
No
- 05.06.2023 SB2023050410
SB2023060533
SB2023061528
and 6 more


Showing elements 41 - 60 out of 1280