Known vulnerabilities in Fedora - page 411

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14128
Public exploits: 709
Known exploited (KEV): 187

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14128 known vulnerabilities: 106 critical, 3829 high, 5507 medium, 4685 low Critical High Medium Low

Vulnerabilities (14128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88959 - Resource Management Errors
CVE-2014-7191
CWE-399 Medium
No
No
- 24.04.2024 SB2024042408
SB2014092407
SB2014092408
and 2 more
#VU21760 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-6394
CWE-22 Medium
No
No
- 14.10.2019 SB2014100801
SB2014092410
SB2014092411
and 1 more
#VU5295 - Command injection
CVE-2014-6271
CWE-77 Critical
Available
Exploited
- 24.01.2017 SB2014091201
SB2015092401
SB2015092613
and 46 more
#VU5294 - Command injection
CVE-2014-7169
CWE-77 Critical
Available
Exploited
- 24.01.2017 SB2014091201
SB2015092501
SB2015092502
and 37 more
#VU658 - Insufficient Verification of Data Authenticity
CVE-2013-0334
CWE-345 Medium
No
No
- 26.09.2016 SB2014082001
SB2016092601
SB2015111901
and 2 more
#VU32488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-6300
CWE-79 Low
No
No
- 08.11.2014 SB2014110803
SB2014102104
SB2015053101
and 4 more
#VU32358 - Credentials Management
CVE-2014-5351
CWE-255 Low
No
No
- 10.10.2014 SB2014101002
SB2015120913
SB2015021602
and 3 more
#VU32479 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-7154
CWE-362 Medium
No
No
- 02.10.2014 SB2014100203
SB2014102305
SB2014122604
and 1 more
#VU32480 - Permissions, Privileges, and Access Controls
CVE-2014-7155
CWE-264 Medium
No
No
- 02.10.2014 SB2014100204
SB2014102306
SB2014122604
and 1 more
#VU32481 - Permissions, Privileges, and Access Controls
CVE-2014-7156
CWE-264 Low
No
No
- 02.10.2014 SB2014100205
SB2014102307
SB2014122604
and 1 more
#VU33655 - Cryptographic Issues
CVE-2014-1568
CWE-310 Medium
No
No
- 25.09.2014 SB2014092603
SB2014100108
SB2014093019
and 8 more
#VU32498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5273
CWE-79 Low
No
No
- 22.08.2014 SB2014082201
SB2014090303
SB2014081805
and 1 more
#VU32521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4348
CWE-79 Low
No
No
- 25.06.2014 SB2014062502
SB2014062505
SB2014071904
and 1 more
#VU32522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4349
CWE-79 Low
No
No
- 25.06.2014 SB2014062504
SB2014062506
SB2014071904
and 1 more
#VU41570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3966
CWE-79 Low
No
No
- 06.06.2014 SB2014060607
SB2014062603
SB2014062604
and 2 more
#VU32574 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-1879
CWE-79 Low
No
No
- 20.02.2014 SB2014022002
SB2014030509
SB2014071904
and 1 more
#VU32642 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4998
CWE-200 Medium
No
No
- 31.07.2013 SB2013073105
SB2013080114
SB2013110411
and 2 more
#VU32643 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4999
CWE-200 Medium
No
No
- 31.07.2013 SB2013073106
SB2013080115
SB2013110411
and 2 more
#VU32644 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5000
CWE-200 Medium
No
No
- 31.07.2013 SB2013073107
SB2013080116
SB2013110411
and 2 more
#VU32647 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5003
CWE-89 Low
No
No
- 31.07.2013 SB2013073110
SB2013080119
SB2013110411
and 2 more


Showing elements 8201 - 8220 out of 14128