Known vulnerabilities in Fedora 37 - page 38

Software: Fedora
Version: 37
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1280
Public exploits: 52
Known exploited (KEV): 23
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 37 Fedora 37 is affected by 1280 vulnerabilities: 21 critical, 333 high, 604 medium, 322 low Critical High Medium Low

Vulnerabilities (1280)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79636 - Exposure of resource to wrong sphere
CVE-2023-26081
CWE-668 Medium
No
No
- 16.08.2023 SB20230816236
SB20230816238
SB20230816239
and 2 more
#VU74843 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-0778
CWE-367 Medium
No
No
- 11.04.2023 SB2023041130
SB2023041131
SB2023051738
and 10 more
#VU72707 - Out-of-bounds read
CVE-2023-1018
CWE-125 Medium
No
No
- 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 17 more
#VU72706 - Out-of-bounds write
CVE-2023-1017
CWE-787 High
No
No
- 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 16 more
#VU72649 - Integer overflow
CVE-2023-25155
CWE-190 Low
No
No
- 01.03.2023 SB2023030105
SB2023031014
SB2023031036
and 20 more
#VU72634 - Resource exhaustion
CVE-2022-36021
CWE-400 Medium
No
No
- 28.02.2023 SB2023022869
SB2023031014
SB2023031036
and 17 more
#VU72557 - Memory corruption
CVE-2022-4904
CWE-119 Low
No
No
- 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 38 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
- 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72336 - Cleartext Transmission of Sensitive Information
CVE-2023-23915
CWE-319 Medium
No
No
- 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 26 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914
CWE-319 Medium
No
No
- 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU72330 - Resource exhaustion
CVE-2023-24580
CWE-400 Medium
No
No
- 16.02.2023 SB2023021645
SB2023021648
SB2023031032
and 15 more
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Public exploit available
No
- 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032
CWE-122 Critical
No
No
- 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361
CWE-326 Medium
No
No
- 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU72036 - Error Handling
CVE-2023-23931
CWE-388 Low
No
No
- 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU70620 - Improper input validation
CVE-2022-23524
CWE-20 Medium
No
No
- 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 7 more
#VU70618 - Improper input validation
CVE-2022-23526
CWE-20 Medium
No
No
- 03.01.2023 SB2023010306
SB2023010307
SB2023041126
and 9 more
#VU67893 - Improper input validation
CVE-2022-41323
CWE-20 Medium
No
No
- 04.10.2022 SB2022100415
SB2022100429
SB2022101602
and 9 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
- 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU65327 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-31081
CWE-444 Medium
No
No
- 14.07.2022 SB2022071425
SB2022071426
SB2022071826
and 14 more


Showing elements 741 - 760 out of 1280