Known vulnerabilities in Fedora 5 - page 8

Software: Fedora
Version: 5
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 389
Public exploits: 42
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 5 Fedora 5 is affected by 389 vulnerabilities: 45 high, 187 medium, 157 low Critical High Medium Low

Vulnerabilities (389)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU446 - Resource exhaustion
CVE-2014-5265
CWE-400 Low
Public exploit available
No
- 14.09.2016 SB2015092615
SB2014080706
SB2014080707
and 4 more
#VU32488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6300
CWE-79 Low
No
No
- 08.11.2014 SB2014110803
SB2014102104
SB2015053101
and 4 more
#VU41312 - Improper input validation
CVE-2014-3614
CWE-20 Medium
No
No
- 19.09.2014 SB2014091901
SB2014091004
SB2014091005
and 2 more
#VU32498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5273
CWE-79 Low
No
No
- 22.08.2014 SB2014082201
SB2014090303
SB2014081805
and 1 more
#VU41396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5240
CWE-79 Low
No
No
- 18.08.2014 SB2014080710
SB2014080711
#VU41397 - Improper input validation
CVE-2014-5203
CWE-20 Medium
No
No
- 18.08.2014 SB2014081801
SB2014080710
SB2014080711
#VU41398 - Cross-Site Request Forgery (CSRF)
CVE-2014-5204
CWE-352 Medium
No
No
- 18.08.2014 SB2014080710
SB2014080711
#VU41399 - Cross-Site Request Forgery (CSRF)
CVE-2014-5205
CWE-352 Medium
No
No
- 18.08.2014 SB2014081802
SB2014080710
SB2014080711
#VU41500 - Improper Authentication
CVE-2014-4168
CWE-287 Medium
No
No
- 03.07.2014 SB2014070305
SB2014080712
SB2014080713
#VU32521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4348
CWE-79 Low
No
No
- 25.06.2014 SB2014062502
SB2014062505
SB2014071904
and 1 more
#VU32522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4349
CWE-79 Low
No
No
- 25.06.2014 SB2014062504
SB2014062506
SB2014071904
and 1 more
#VU32574 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-1879
CWE-79 Low
No
No
- 20.02.2014 SB2014022002
SB2014030509
SB2014071904
and 1 more
#VU42087 - Improper input validation
CVE-2013-7177
CWE-20 Medium
No
No
- 01.02.2014 SB2014020101
SB2014072110
#VU42632 - Memory corruption
CVE-2011-4607
CWE-119 Low
No
No
- 23.08.2013 SB2013082002
SB2013082105
SB2014091705
and 1 more
#VU42653 - Heap-based Buffer Overflow
CVE-2013-4852
CWE-122 Medium
No
No
- 20.08.2013 SB2013091502
SB2013082105
SB2013081201
and 2 more
#VU32642 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4998
CWE-200 Medium
No
No
- 31.07.2013 SB2013073105
SB2013080114
SB2013110411
and 2 more
#VU32643 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4999
CWE-200 Medium
No
No
- 31.07.2013 SB2013073106
SB2013080115
SB2013110411
and 2 more
#VU32644 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5000
CWE-200 Medium
No
No
- 31.07.2013 SB2013073107
SB2013080116
SB2013110411
and 2 more
#VU32647 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5003
CWE-89 Low
No
No
- 31.07.2013 SB2013073110
SB2013080119
SB2013110411
and 2 more
#VU43661 - Cryptographic Issues
CVE-2012-2146
CWE-310 Medium
No
No
- 27.08.2012 SB2012082701
SB2014082505


Showing elements 141 - 160 out of 389