Known vulnerabilities in Fedora 37 - page 54

Software: Fedora
Version: 37
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1280
Public exploits: 52
Known exploited (KEV): 23
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 37 Fedora 37 is affected by 1280 vulnerabilities: 21 critical, 333 high, 604 medium, 322 low Critical High Medium Low

Vulnerabilities (1280)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70499 - Out-of-bounds read
CVE-2022-3435
CWE-125 Medium
No
No
- 27.12.2022 SB2022122717
SB2022122722
SB2022122723
and 48 more
#VU68964 - Stack-based buffer overflow
CVE-2022-3324
CWE-121 High
No
No
- 03.11.2022 SB2022110330
SB2022112963
SB2022121302
and 21 more
#VU68317 - NULL Pointer Dereference
CVE-2022-42722
CWE-476 Medium
No
No
- 14.10.2022 SB2022101416
SB2022101707
SB2022101712
and 47 more
#VU68316 - Memory corruption
CVE-2022-42721
CWE-119 High
No
No
- 14.10.2022 SB2022101415
SB2022101707
SB2022101712
and 49 more
#VU68314 - Use After Free
CVE-2022-42720
CWE-416 High
No
No
- 14.10.2022 SB2022101413
SB2022101707
SB2022101712
and 49 more
#VU68313 - Use After Free
CVE-2022-42719
CWE-416 High
No
No
- 14.10.2022 SB2022101413
SB2022101707
SB2022101712
and 37 more
#VU68311 - Memory corruption
CVE-2022-41674
CWE-119 High
No
No
- 14.10.2022 SB2022101412
SB2022101707
SB2022101712
and 49 more
#VU67627 - Use After Free
CVE-2022-3256
CWE-416 High
No
No
- 24.09.2022 SB2022092409
SB2022092410
SB2022121302
and 14 more
#VU67587 - Improper Access Control
CVE-2022-40768
CWE-284 Low
No
No
- 22.09.2022 SB2022092233
SB2022102001
SB2022102677
and 45 more
#VU63344 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-29221
CWE-94 High
Public exploit available
No
- 17.05.2022 SB2022051727
SB2022053020
SB2022092631
and 5 more
#VU61665 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21408
CWE-94 Medium
No
No
- 28.03.2022 SB2022032834
SB2022032835
SB2022053020
and 4 more
#VU61664 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-29454
CWE-94 High
No
No
- 28.03.2022 SB2022032833
SB2022032835
SB2022053020
and 4 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729
CWE-185 Low
No
No
- 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU61426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24728
CWE-79 Low
No
No
- 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 12 more
#VU58220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41164
CWE-79 Medium
No
No
- 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 6 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165
CWE-79 Medium
No
No
- 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU50870 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26120
CWE-94 Medium
Public exploit available
No
- 23.02.2021 SB2021022311
SB2021052605
SB2022032835
and 4 more
#VU50869 - Permissions, Privileges, and Access Controls
CVE-2021-26119
CWE-264 Medium
Public exploit available
No
- 23.02.2021 SB2021022311
SB2021052605
SB2022032835
and 4 more
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103
CWE-79 Low
No
No
- 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more
#VU3374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-5312
CWE-79 Low
No
No
- 30.11.-0001 SB2012112701
SB2015092606
SB2015072206
and 8 more


Showing elements 1061 - 1080 out of 1280