Known vulnerabilities in Fedora 39 - page 15

Software: Fedora
Version: 39
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1305
Public exploits: 80
Known exploited (KEV): 29
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 39 Fedora 39 is affected by 1305 vulnerabilities: 21 critical, 383 high, 537 medium, 364 low Critical High Medium Low

Vulnerabilities (1305)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93851 - Unrestricted Upload of File with Dangerous Type
CVE-2024-3116
CWE-434 Medium
Public exploit available
No
- 08.07.2024 SB2024070803
SB2024070807
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
- 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU93801 - Resource exhaustion
CVE-2024-6126
CWE-400 Low
No
No
- 04.07.2024 SB2024070481
SB2024070484
SB2024070498
and 7 more
#VU93640 - Improper input validation
CVE-2024-38519
CWE-20 High
No
No
- 02.07.2024 SB2024070259
SB2024070555
SB2024070556
and 2 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476
CWE-918 High
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Public exploit available
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Public exploit available
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Public exploit available
No
- 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU93316 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-6306
CWE-22 Medium
No
No
- 25.06.2024 SB20240625118
SB2024070335
SB2024070336
and 1 more
#VU93315 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-32111
CWE-79 Low
No
No
- 25.06.2024 SB20240625118
SB2024070335
SB2024070336
and 1 more
#VU93314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6307
CWE-79 Medium
No
No
- 25.06.2024 SB20240625118
SB2024070335
SB2024070336
and 1 more
#VU93235 - Out-of-bounds write
CVE-2024-37894
CWE-787 Medium
No
No
- 25.06.2024 SB2024062519
SB2024070286
SB2024070287
and 11 more
#VU93222 - Use After Free
CVE-2024-6290
CWE-416 High
No
No
- 24.06.2024 SB2024062507
SB20240625119
SB20240625120
and 6 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
- 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92284 - Improper input validation
CVE-2024-33870
CWE-20 High
No
No
- 19.06.2024 SB20240613135
SB2024061967
SB2024062733
and 13 more
#VU92282 - Use of Externally-Controlled Format String
CVE-2024-29510
CWE-134 High
Public exploit available
Exploited
- 19.06.2024 SB20240613135
SB2024061967
SB2024062733
and 14 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891
CWE-200 Low
No
No
- 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235
CWE-61 Low
Public exploit available
No
- 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more


Showing elements 281 - 300 out of 1305