Known vulnerabilities in Fedora - page 433

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14128
Public exploits: 709
Known exploited (KEV): 187

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14128 known vulnerabilities: 106 critical, 3829 high, 5507 medium, 4685 low Critical High Medium Low

Vulnerabilities (14128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107894 - Insufficient UI Warning of Dangerous Operations
CVE-2025-3839
CWE-357 High
No
No
- 23.04.2025 SB2025042359
SB2025042421
SB2025042422
#VU87539 - Memory corruption
CVE-2022-48620
CWE-119 Medium
No
No
- 14.03.2024 SB2024031452
SB2024031461
SB2024031462
and 3 more
#VU87167 - Improper input validation
CVE-2024-1481
CWE-20 Medium
No
No
- 06.03.2024 SB2024030645
SB2024030665
SB2024030666
and 5 more
#VU86309 - Observable discrepancy
CVE-2023-45287
CWE-203 Medium
No
No
- 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU86202 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24575
CWE-835 Medium
No
No
- 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 15 more
#VU86201 - Heap-based Buffer Overflow
CVE-2024-24577
CWE-122 High
No
No
- 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 29 more
#VU86197 - Use After Free
CVE-2024-1284
CWE-416 High
No
No
- 06.02.2024 SB2024020708
SB2024020868
SB2024020913
and 9 more
#VU86198 - Heap-based Buffer Overflow
CVE-2024-1283
CWE-122 High
No
No
- 06.02.2024 SB2024020708
SB2024020868
SB2024020913
and 8 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647
CWE-444 Medium
No
No
- 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285
CWE-311 Medium
No
No
- 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
- 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82972 - Use After Free
CVE-2023-5341
CWE-416 High
No
No
- 10.11.2023 SB2023111026
SB2023111027
SB2023111030
and 16 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175
CWE-444 Medium
No
No
- 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more
#VU81039 - Missing release of memory after effective lifetime
CVE-2022-48541
CWE-401 Low
No
No
- 21.09.2023 SB2023092135
SB2023092136
SB2023092604
and 5 more
#VU73775 - Credentials Management
CVE-2023-28531
CWE-255 Low
No
No
- 17.03.2023 SB2023031706
SB2023031713
SB2023062110
and 5 more
#VU45323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0697
CWE-79 Low
No
No
- 14.02.2011 SB2011021401
SB2011020902
SB2011020903
and 1 more
#VU45393 - Heap-based Buffer Overflow
CVE-2010-4652
CWE-122 Medium
No
No
- 02.02.2011 SB2011020201
SB2011011905
#VU45481 - Permissions, Privileges, and Access Controls
CVE-2010-4534
CWE-264 Low
No
No
- 10.01.2011 SB2011011001
SB2011010311
SB2015010606
#VU45482 - Improper input validation
CVE-2010-4535
CWE-20 Medium
No
No
- 10.01.2011 SB2011011001
SB2011010311
SB2015010606
#VU31845 - Out-of-bounds read
CVE-2009-3720
CWE-125 Medium
No
No
- 03.11.2009 SB2009110301
SB2010011702
SB2012092402
and 2 more


Showing elements 8641 - 8660 out of 14128