Known vulnerabilities in Fedora 40 - page 36

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93853 - Improper Authentication
CVE-2024-4215
CWE-287 Low
No
No
- 08.07.2024 SB2024070804
SB2024070806
SB2024070808
#VU93852 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-4216
CWE-79 Low
No
No
- 08.07.2024 SB2024070804
SB2024070806
SB2024070808
and 2 more
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
- 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU93640 - Improper input validation
CVE-2024-38519
CWE-20 High
No
No
- 02.07.2024 SB2024070259
SB2024070555
SB2024070556
and 2 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476
CWE-918 High
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Public exploit available
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Public exploit available
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93517 - Off-by-one Error
CVE-2024-38441
CWE-193 High
No
No
- 01.07.2024 SB2024070147
SB2024070149
SB2024070345
and 3 more
#VU93516 - Off-by-one Error
CVE-2024-38440
CWE-193 High
No
No
- 01.07.2024 SB2024070147
SB2024070149
SB2024070345
and 3 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Public exploit available
No
- 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU93512 - Off-by-one Error
CVE-2024-38439
CWE-193 High
No
No
- 01.07.2024 SB2024070147
SB2024070149
SB2024070345
and 3 more
#VU93316 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-6306
CWE-22 Medium
No
No
- 25.06.2024 SB20240625118
SB2024070335
SB2024070336
and 1 more
#VU93315 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-32111
CWE-79 Low
No
No
- 25.06.2024 SB20240625118
SB2024070335
SB2024070336
and 1 more
#VU93314 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6307
CWE-79 Medium
No
No
- 25.06.2024 SB20240625118
SB2024070335
SB2024070336
and 1 more
#VU93235 - Out-of-bounds write
CVE-2024-37894
CWE-787 Medium
No
No
- 25.06.2024 SB2024062519
SB2024070286
SB2024070287
and 11 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
- 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235
CWE-61 Low
Public exploit available
No
- 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more


Showing elements 701 - 720 out of 1148