Known vulnerabilities in Fedora 40 - page 19

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101032 - Command injection
CVE-2024-53899
CWE-77 Low
No
No
- 28.11.2024 SB2024112869
SB2024112872
SB2024112873
and 18 more
#VU101026 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-52336
CWE-94 Low
No
No
- 28.11.2024 SB2024112824
SB2024112828
SB2024112842
and 8 more
#VU101024 - Improper Output Neutralization for Logs
CVE-2024-52337
CWE-117 Low
No
No
- 28.11.2024 SB2024112824
SB2024112827
SB2024112828
and 20 more
#VU100986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11003
CWE-78 Low
Public exploit available
No
- 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100984 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48992
CWE-94 Low
No
No
- 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100983 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-48991
CWE-362 Low
Public exploit available
No
- 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100982 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48990
CWE-94 Low
Public exploit available
Exploited
- 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 8 more
#VU100967 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-11708
CWE-362 Low
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100966 - NULL Pointer Dereference
CVE-2024-11706
CWE-476 Low
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100965 - NULL Pointer Dereference
CVE-2024-11705
CWE-476 Low
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100964 - Double Free
CVE-2024-11704
CWE-415 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 15 more
#VU100961 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11701
CWE-451 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112671
SB2024112870
and 5 more
#VU100959 - Memory corruption
CVE-2024-11699
CWE-119 High
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100958 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11698
CWE-357 Medium
No
No
- 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 9 more
#VU100913 - Improper Certificate Validation
CVE-2024-51774
CWE-295 Medium
No
No
- 25.11.2024 SB2024112547
SB2024112548
SB2024112549
#VU100912 - Improper Authentication
CVE-2024-10963
CWE-287 Medium
No
No
- 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU100669 - Improper input validation
CVE-2024-44308
CWE-20 Critical
No
Exploited
- 19.11.2024 SB2024111982
SB2024111983
SB2024111984
and 15 more
#VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-44309
CWE-79 High
No
Exploited
- 19.11.2024 SB2024111981
SB2024111982
SB2024111983
and 29 more
#VU100667 - Type confusion
CVE-2024-11395
CWE-843 High
No
No
- 19.11.2024 SB2024111980
SB2024112232
SB2024112233
and 9 more
#VU100313 - Improperly Implemented Security Check for Standard
CVE-2024-11110
CWE-358 Low
No
No
- 12.11.2024 SB20241112116
SB2024111460
SB2024112232
and 10 more


Showing elements 361 - 380 out of 1148