Known vulnerabilities in Fedora - page 374

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14121
Public exploits: 708
Known exploited (KEV): 187

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14121 known vulnerabilities: 106 critical, 3826 high, 5503 medium, 4685 low Critical High Medium Low

Vulnerabilities (14121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33987 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2016-3116
CWE-93 Medium
Available
No
- 05.08.2020 SB2016032204
SB2016032207
SB2016072025
and 8 more
#VU33986 - Improper Authentication
CVE-2016-5008
CWE-287 Medium
No
No
- 05.08.2020 SB2016071316
SB2016071919
SB2016071921
and 2 more
#VU20302 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-6232
CWE-22 Medium
No
No
- 19.08.2019 SB2019081903
SB2016080205
SB2016072605
and 5 more
#VU10741 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3704
CWE-200 Low
No
No
- 27.02.2018 SB2016033001
SB2018022115
SB2016071508
#VU10739 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3696
CWE-200 Low
No
No
- 27.02.2018 SB2016033001
SB2018022115
SB2016071508
#VU10733 - Buffer overflow
CVE-2016-1669
CWE-120 Low
No
No
- 27.02.2018 SB2016042302
SB2017040503
SB2018022115
and 7 more
#VU346 - Server-Side Request Forgery (SSRF)
CVE-2016-5385
CWE-918 High
No
No
- 27.08.2016 SB2016071801
SB2016081103
SB2016081104
and 11 more
#VU337 - Improper Access Control
CVE-2016-5387
CWE-284 Medium
No
No
- 20.08.2016 SB2016080101
SB2016122101
SB2016071805
and 12 more
#VU40137 - Use After Free
CVE-2015-8949
CWE-416 High
No
No
- 20.08.2016 SB2016082006
SB2016072611
SB2016072612
and 1 more
#VU32247 - Out-of-bounds read
CVE-2016-6214
CWE-125 Medium
No
No
- 12.08.2016 SB2016081206
SB2016091419
SB2016072215
and 1 more
#VU32248 - Out-of-bounds read
CVE-2016-6132
CWE-125 Medium
No
No
- 12.08.2016 SB2016081207
SB2016091421
SB2016120406
and 2 more
#VU32246 - Improper input validation
CVE-2016-6128
CWE-20 Medium
No
No
- 07.08.2016 SB2016080706
SB2016091417
SB2016120406
and 1 more
#VU32245 - Heap-based Buffer Overflow
CVE-2016-5766
CWE-122 High
No
No
- 07.08.2016 SB2016080705
SB2016091416
SB2016120406
and 7 more
#VU255 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6210
CWE-200 Medium
Available
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 16 more
#VU194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5385
CWE-79 High
No
No
- 22.07.2016 SB2016072001
SB2016072206
SB2016081103
and 14 more
#VU164 - Memory corruption
CVE-2016-2775
CWE-119 Medium
No
No
- 19.07.2016 SB2017082408
SB2016072005
SB2016072207
and 13 more
#VU33632 - Improper Access Control
CVE-2016-5386
CWE-284 High
No
No
- 19.07.2016 SB2016072018
SB2016081709
SB2023022232
and 6 more
#VU40214 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-6130
CWE-362 Low
No
No
- 04.07.2016 SB2016070416
SB2016071239
SB2016101137
#VU32274 - Improper input validation
CVE-2015-8899
CWE-20 Medium
No
No
- 30.06.2016 SB2016063013
SB2017010306
SB2016122312
and 8 more
#VU32337 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7511
CWE-200 Low
No
No
- 20.04.2016 SB2016042002
SB2016021803
SB2016022312
and 3 more


Showing elements 7461 - 7480 out of 14121