Known vulnerabilities in Fedora - page 213

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13374
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13374 known vulnerabilities: 103 critical, 3543 high, 5258 medium, 4469 low Critical High Medium Low

Vulnerabilities (13374)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81468 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-5002
CWE-78 Medium
No
No
- 04.10.2023 SB2023100470
SB2023100473
SB2023100474
#VU81467 - UNIX Symbolic Link (Symlink) Following
CVE-2023-5115
CWE-61 Low
No
No
- 04.10.2023 SB2023100466
SB2023100475
SB2023101275
and 9 more
#VU81462 - Out-of-bounds read
CVE-2023-41051
CWE-125 Low
No
No
- 04.10.2023 SB2023100450
SB2023100455
SB2023100456
and 2 more
#VU81455 - Improper Access Control
CVE-2023-42453
CWE-284 Low
No
No
- 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 2 more
#VU81454 - Cleartext Storage of Sensitive Information
CVE-2023-41335
CWE-312 Low
No
No
- 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 2 more
#VU81436 - Out-of-bounds read
CVE-2023-43789
CWE-125 Low
No
No
- 03.10.2023 SB2023100342
SB2023100346
SB2023100424
and 36 more
#VU81435 - Out-of-bounds read
CVE-2023-43788
CWE-125 Low
No
No
- 03.10.2023 SB2023100342
SB2023100346
SB2023100424
and 37 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Available
Exploited
- 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU81133 - Use After Free
CVE-2023-5175
CWE-416 Medium
No
No
- 26.09.2023 SB2023092643
SB2023100313
SB2023100459
and 6 more
#VU81132 - Out-of-bounds write
CVE-2023-5173
CWE-787 Medium
No
No
- 26.09.2023 SB2023092643
SB2023100313
SB2023100459
and 6 more
#VU81131 - Use After Free
CVE-2023-5172
CWE-416 High
No
No
- 26.09.2023 SB2023092643
SB2023100313
SB2023100459
and 6 more
#VU81130 - Missing release of memory after effective lifetime
CVE-2023-5170
CWE-401 Medium
No
No
- 26.09.2023 SB2023092643
SB2023100313
SB2023100459
and 6 more
#VU80440 - Deserialization of Untrusted Data
CVE-2023-30534
CWE-502 Medium
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80439 - Incorrect Default Permissions
CVE-2023-31132
CWE-276 Low
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80428 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39359
CWE-89 Medium
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 5 more
#VU80427 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39358
CWE-89 Medium
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU80425 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39357
CWE-89 Medium
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80424 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39361
CWE-89 High
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 6 more
#VU80423 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39360
CWE-79 Low
No
No
- 05.09.2023 SB2023090541
SB2023100429
SB2023100430
and 4 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761
CWE-444 Medium
No
No
- 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more


Showing elements 4241 - 4260 out of 13374