Known vulnerabilities in Fedora - page 408

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13378
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13378 known vulnerabilities: 103 critical, 3543 high, 5262 medium, 4469 low Critical High Medium Low

Vulnerabilities (13378)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67622 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-8161
CWE-22 Medium
No
No
- 23.09.2022 SB2020070234
SB2022092345
SB2021040632
and 3 more
#VU29957 - Improper Privilege Management
CVE-2020-10757
CWE-269 Low
No
No
- 15.07.2020 SB2020060972
SB2020073029
SB2020073031
and 11 more
#VU29426 - Memory corruption
CVE-2020-13249
CWE-119 Medium
No
No
- 01.07.2020 SB2020070110
SB2020070111
SB2020052917
and 20 more
#VU29110 - Out-of-bounds read
CVE-2017-7544
CWE-125 Medium
No
No
- 17.06.2020 SB2020052216
SB2020061149
SB2018100815
and 3 more
#VU28979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13965
CWE-79 Medium
No
Exploited
- 11.06.2020 SB2020061115
SB2020061116
SB2020060828
and 1 more
#VU28978 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13964
CWE-79 Medium
No
No
- 11.06.2020 SB2020061115
SB2020061116
SB2020060828
and 1 more
#VU28954 - Improper Certificate Validation
CVE-2020-13254
CWE-295 Medium
Available
No
- 10.06.2020 SB2020061040
SB2020061041
SB2020121608
and 5 more
#VU28953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13596
CWE-79 Low
No
No
- 10.06.2020 SB2020061040
SB2020061041
SB2020121609
and 4 more
#VU34363 - Improper Authentication
CVE-2020-10754
CWE-287 Low
No
No
- 08.06.2020 SB2020060826
SB2020093023
SB2020072124
and 2 more
#VU28581 - Server-Side Request Forgery (SSRF)
CVE-2020-13379
CWE-918 Medium
Available
No
- 04.06.2020 SB2020060421
SB2020062606
SB2020062610
and 10 more
#VU28557 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-13777
CWE-300 Medium
Available
No
- 04.06.2020 SB2020060401
SB2020060402
SB2020060606
and 13 more
#VU28556 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-13401
CWE-451 Medium
Available
No
- 03.06.2020 SB2020060335
SB2020060336
SB2020062305
and 7 more
#VU28143 - Out-of-bounds read
CVE-2020-10030
CWE-125 Low
No
No
- 20.05.2020 SB2020052032
SB2020052306
SB2020052307
and 5 more
#VU28142 - Improper input validation
CVE-2020-12244
CWE-20 Medium
No
No
- 20.05.2020 SB2020052032
SB2020052101
SB2020052222
and 7 more
#VU28141 - Improper input validation
CVE-2020-10995
CWE-20 Medium
No
No
- 20.05.2020 SB2020052032
SB2020052101
SB2020052222
and 7 more
#VU28005 - Divide By Zero
CVE-2020-12767
CWE-369 Low
No
No
- 19.05.2020 SB2020051911
SB2020052216
SB2020072705
and 7 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
- 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU26916 - Improper input validation
CVE-2020-2752
CWE-20 Medium
No
No
- 15.04.2020 SB2020041716
SB2020051307
SB2020070111
and 28 more
#VU25812 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-9402
CWE-89 High
No
No
- 08.03.2020 SB2020030801
SB2020030802
SB2020050101
and 6 more
#VU24846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-7471
CWE-89 Medium
Available
No
- 03.02.2020 SB2020020315
SB2020020316
SB2020021911
and 6 more


Showing elements 8141 - 8160 out of 13378