Known vulnerabilities in Fedora - page 349

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14105
Public exploits: 708
Known exploited (KEV): 186

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14105 known vulnerabilities: 106 critical, 3826 high, 5500 medium, 4672 low Critical High Medium Low

Vulnerabilities (14105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12653 - Memory corruption
CVE-2016-10268
CWE-119 Low
No
No
- 15.05.2018 SB2016120301
SB2017050118
SB2017042610
and 4 more
#VU31319 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0361
CWE-200 Low
No
No
- 13.04.2018 SB2018041306
SB2017111522
SB2017040706
and 1 more
#VU31320 - Cross-Site Request Forgery (CSRF)
CVE-2017-0362
CWE-352 Medium
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31321 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-0363
CWE-601 Low
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31322 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-0364
CWE-601 Low
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0365
CWE-79 Low
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31324 - Improper input validation
CVE-2017-0366
CWE-20 Medium
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31325 -
CVE-2017-0367
High
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31326 - Improper input validation
CVE-2017-0368
CWE-20 Medium
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31327 - Incorrect Default Permissions
CVE-2017-0369
CWE-276 Medium
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31328 - Improper input validation
CVE-2017-0370
CWE-20 Medium
No
No
- 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU6630 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-2619
CWE-362 Low
Available
No
- 23.05.2017 SB2017052305
SB2017032402
SB2017052209
and 22 more
#VU32098 - Divide By Zero
CVE-2016-10266
CWE-369 Medium
No
No
- 24.03.2017 SB2017032407
SB2017050116
SB2017042610
and 4 more
#VU32099 - Divide By Zero
CVE-2016-10267
CWE-369 Medium
No
No
- 24.03.2017 SB2017032408
SB2017050117
SB2017042610
and 4 more
#VU32100 - Out-of-bounds read
CVE-2016-10269
CWE-125 Medium
No
No
- 24.03.2017 SB2017032409
SB2017050119
SB2017042610
and 3 more
#VU32101 - Out-of-bounds read
CVE-2016-10270
CWE-125 Medium
No
No
- 24.03.2017 SB2017032410
SB2017050120
SB2017042610
and 3 more
#VU39381 - Out-of-bounds read
CVE-2016-10271
CWE-125 Medium
No
No
- 24.03.2017 SB2017032412
SB2017042610
SB2017041816
and 2 more
#VU1131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9014
CWE-79 Low
No
No
- 02.11.2016 SB2016110103
SB2016111602
SB2016111603
and 6 more
#VU1130 - Use of Hard-coded Password
CVE-2016-9013
CWE-259 Low
No
No
- 02.11.2016 SB2016110103
SB2016111602
SB2016111603
and 6 more
#VU698 - Cross-Site Request Forgery (CSRF)
CVE-2016-7401
CWE-352 Medium
No
No
- 30.09.2016 SB2016100101
SB2016092701
SB2016092702
and 12 more


Showing elements 6961 - 6980 out of 14105