Known vulnerabilities in Fedora - page 522

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14128
Public exploits: 709
Known exploited (KEV): 187

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14128 known vulnerabilities: 106 critical, 3829 high, 5507 medium, 4685 low Critical High Medium Low

Vulnerabilities (14128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67361 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-39360
CWE-300 Medium
No
No
- 14.09.2022 SB2021082208
SB2022091458
SB2022091459
and 4 more
#VU64417 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41092
CWE-200 Medium
No
No
- 15.06.2022 SB2021100420
SB2022061528
SB2021101264
and 13 more
#VU63066 - Heap-based Buffer Overflow
CVE-2021-3875
CWE-122 High
No
No
- 11.05.2022 SB2022051173
SB2022062022
SB2022082104
and 11 more
#VU63065 - Use After Free
CVE-2021-3796
CWE-416 High
No
No
- 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 21 more
#VU63063 - Heap-based Buffer Overflow
CVE-2021-3778
CWE-122 High
No
No
- 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 22 more
#VU63059 - Heap-based Buffer Overflow
CVE-2021-3872
CWE-122 High
No
No
- 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 21 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813
CWE-611 Medium
No
No
- 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU59319 - Origin Validation Error
CVE-2021-3618
CWE-346 Medium
No
No
- 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22960
CWE-444 Medium
No
No
- 05.01.2022 SB2022010523
SB2022010524
SB2022042806
and 40 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22959
CWE-444 Medium
No
No
- 05.01.2022 SB2022010523
SB2022010524
SB2022011841
and 43 more
#VU57656 - Out-of-bounds write
CVE-2021-21703
CWE-787 Low
No
No
- 26.10.2021 SB2021102621
SB2021102719
SB2022012745
and 20 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550
CWE-300 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57494 - Improper input validation
CVE-2021-35565
CWE-20 Medium
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 78 more
#VU57497 - Improper input validation
CVE-2021-35588
CWE-20 Low
No
No
- 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 52 more
#VU57320 - Improper Access Control
CVE-2021-39226
CWE-284 Medium
Available
Exploited
- 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU57176 - Permissions, Privileges, and Access Controls
CVE-2021-41133
CWE-264 Low
No
No
- 08.10.2021 SB2021100815
SB2021101417
SB2021110212
and 17 more
#VU57127 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-42013
CWE-78 Critical
Available
Exploited
- 07.10.2021 SB2021100718
SB2021100802
SB2021101513
and 8 more
#VU57063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41773
CWE-22 Critical
Available
Exploited
- 05.10.2021 SB2021100514
SB2021100601
SB2021100802
and 8 more
#VU57038 - Incorrect Default Permissions
CVE-2021-41103
CWE-276 Low
No
No
- 04.10.2021 SB2021100406
SB2021100503
SB2021110812
and 22 more
#VU55278 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-32749
CWE-94 High
No
No
- 23.07.2021 SB2021072310
SB2023101904
SB2021101008
and 3 more


Showing elements 10421 - 10440 out of 14128