Known vulnerabilities in Fedora - page 434

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14128
Public exploits: 709
Known exploited (KEV): 187

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14128 known vulnerabilities: 106 critical, 3829 high, 5507 medium, 4685 low Critical High Medium Low

Vulnerabilities (14128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107593 - Weak Password Requirements
CVE-2025-2291
CWE-521 Medium
No
No
- 17.04.2025 SB2025041743
SB2025041745
SB2025041746
and 4 more
#VU107466 - Heap-based Buffer Overflow
CVE-2025-3619
CWE-122 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 6 more
#VU107467 - Use After Free
CVE-2025-3620
CWE-416 High
No
No
- 15.04.2025 SB2025041610
SB2025041744
SB2025041803
and 8 more
#VU107429 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-53868
CWE-444 Medium
No
No
- 14.04.2025 SB2025041439
SB2025041443
SB2025041444
and 6 more
#VU107411 - Heap-based Buffer Overflow
CVE-2024-56406
CWE-122 High
Available
No
- 14.04.2025 SB2025041424
SB2025041425
SB2025041429
and 18 more
#VU107132 - Heap-based Buffer Overflow
CVE-2025-31344
CWE-122 High
No
No
- 08.04.2025 SB2025040803
SB2025040804
SB2025040805
and 11 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
- 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU107018 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-2945
CWE-94 Medium
Available
Exploited
- 05.04.2025 SB2025040506
SB2025041801
#VU107017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2946
CWE-79 Low
No
No
- 05.04.2025 SB2025040506
SB2025041801
#VU106941 - Resource exhaustion
CVE-2024-45700
CWE-400 Medium
No
No
- 03.04.2025 SB2025040345
SB2025040355
SB2025040356
and 5 more
#VU106940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45699
CWE-79 Low
No
No
- 03.04.2025 SB2025040346
SB2025040355
SB2025040356
and 4 more
#VU106939 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36469
CWE-200 Low
No
No
- 03.04.2025 SB2025040348
SB2025040355
SB2025040356
and 6 more
#VU106937 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42325
CWE-200 Low
No
No
- 03.04.2025 SB2025040348
SB2025040355
SB2025040356
and 6 more
#VU106081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-27793
CWE-79 Low
Available
No
- 27.03.2025 SB2025032707
SB2025041133
SB2025041134
and 2 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339
CWE-59 Low
No
No
- 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU103896 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-23359
CWE-367 High
No
No
- 12.02.2025 SB2025021232
SB2025042336
SB2025042337
and 2 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788
CWE-835 Medium
No
No
- 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU83864 - Interpretation Conflict
CVE-2023-49284
CWE-436 Low
No
No
- 05.12.2023 SB2023120509
SB2024031269
SB2024031272
and 4 more
#VU81884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2142
CWE-79 Medium
No
No
- 11.10.2023 SB2023101148
SB2025040875
SB2025040876
and 3 more
#VU81056 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41040
CWE-22 Low
No
No
- 22.09.2023 SB2023092227
SB2023102621
SB2023110908
and 6 more


Showing elements 8661 - 8680 out of 14128