Known vulnerabilities in Fedora 40 - page 56

Software: Fedora
Version: 40
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1148
Public exploits: 68
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 40 Fedora 40 is affected by 1148 vulnerabilities: 14 critical, 368 high, 449 medium, 317 low Critical High Medium Low

Vulnerabilities (1148)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96700 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40030
CWE-79 Low
No
No
- 02.09.2024 SB2023082454
SB2024090228
SB2024071831
and 2 more
#VU83633 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-49082
CWE-444 Medium
No
No
- 04.12.2023 SB2023120404
SB2023120408
SB2023121355
and 16 more
#VU83624 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2023-41267
CWE-829 Low
No
No
- 01.12.2023 SB2023120162
SB2023120163
#VU83623 - Improper Access Control
CVE-2023-40712
CWE-284 Low
No
No
- 01.12.2023 SB2023120161
SB2023120163
#VU83544 - Improper Access Control
CVE-2023-47037
CWE-284 Low
No
No
- 28.11.2023 SB2023112860
SB2023120163
#VU82552 - Use of Hard-coded Cryptographic Key
CVE-2023-46129
CWE-321 Medium
No
No
- 30.10.2023 SB2023103010
SB2023112001
SB2023112002
and 5 more
#VU82202 - Resource Management Errors
CVE-2023-7250
CWE-399 Medium
No
No
- 18.10.2023 SB2023101843
SB2023101846
SB2023101847
and 6 more
#VU82078 - Use After Free
CVE-2022-48560
CWE-416 Medium
No
No
- 17.10.2023 SB2023101708
SB2023101712
SB20231017145
and 29 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
- 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
- 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81673 - Improper input validation
CVE-2023-45239
CWE-20 High
No
No
- 06.10.2023 SB2023100610
SB2023100618
SB2023100619
and 5 more
#VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41040
CWE-22 Low
No
No
- 22.09.2023 SB2023092227
SB2023102621
SB2023110908
and 6 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565
CWE-611 Medium
Public exploit available
No
- 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU79746 - Out-of-bounds read
CVE-2022-34300
CWE-125 Low
No
No
- 20.08.2023 SB2022090673
SB2023082952
SB2023101265
and 3 more
#VU75789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23520
CWE-79 Medium
No
No
- 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23519
CWE-79 Medium
No
No
- 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23518
CWE-79 Medium
No
No
- 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
- 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU70330 - Uncontrolled Recursion
CVE-2022-23516
CWE-674 Medium
No
No
- 14.12.2022 SB2022121431
SB2023032922
SB2023050806
and 1 more
#VU70329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23515
CWE-79 Low
No
No
- 14.12.2022 SB2022121431
SB2023032922
SB2023050806
and 1 more


Showing elements 1101 - 1120 out of 1148