Known vulnerabilities in Fedora - page 641

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13394
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13394 known vulnerabilities: 103 critical, 3545 high, 5269 medium, 4476 low Critical High Medium Low

Vulnerabilities (13394)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU444 - Improper Access Control
CVE-2014-9016
CWE-284 Low
Available
No
- 14.09.2016 SB2014112001
SB2015092610
SB2014112005
and 3 more
#VU443 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2014-9015
CWE-113 Low
No
No
- 14.09.2016 SB2014112001
SB2015092610
SB2014112005
and 6 more
#VU33291 - Heap-based Buffer Overflow
CVE-2014-8964
CWE-122 Medium
No
No
- 16.12.2014 SB2014121603
SB2015012501
SB2015052710
and 3 more
#VU41032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8600
CWE-79 Low
No
No
- 08.12.2014 SB2014120841
SB2014111403
SB2014111703
and 1 more
#VU33062 - Command injection
CVE-2014-8990
CWE-77 Medium
No
No
- 05.12.2014 SB2017021012
SB2014111807
SB2014111808
and 3 more
#VU33063 - Command injection
CVE-2014-8990
CWE-77 Medium
No
No
- 05.12.2014 SB2017011016
SB2017011019
SB2015012304
and 7 more
#VU41044 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-8961
CWE-22 Low
No
No
- 30.11.2014 SB2015053101
SB2014112013
SB2014112305
#VU41045 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8960
CWE-79 Low
No
No
- 30.11.2014 SB2014113001
SB2015053101
SB2014112013
and 1 more
#VU7278 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6662
CWE-79 Low
No
No
- 24.11.2014 SB2012112701
SB2015072206
SB2015030501
and 4 more
#VU41064 - Improper input validation
CVE-2014-9030
CWE-20 Medium
No
No
- 24.11.2014 SB2014112402
SB2015010901
SB2015041101
and 2 more
#VU41083 - Stack-based buffer overflow
CVE-2014-8713
CWE-121 Medium
No
No
- 23.11.2014 SB2014112302
SB2014111702
#VU41084 - Resource Management Errors
CVE-2014-8714
CWE-399 Medium
No
No
- 23.11.2014 SB2014112302
SB2014111702
#VU41085 - Resource Management Errors
CVE-2014-8712
CWE-399 Medium
No
No
- 23.11.2014 SB2014112302
SB2014111702
#VU41086 - Improper input validation
CVE-2014-8711
CWE-20 Medium
No
No
- 23.11.2014 SB2014112302
SB2014111702
#VU41087 - Out-of-bounds read
CVE-2014-8710
CWE-125 Medium
No
No
- 23.11.2014 SB2014112302
SB2014111702
#VU41090 - Improper input validation
CVE-2014-8595
CWE-20 Low
No
No
- 19.11.2014 SB2014111903
SB2015010901
SB2015041101
and 3 more
#VU41091 - NULL Pointer Dereference
CVE-2014-8594
CWE-476 Medium
No
No
- 19.11.2014 SB2014111904
SB2015010901
SB2015041101
and 3 more
#VU32465 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7819
CWE-22 Medium
No
No
- 08.11.2014 SB2014110802
SB2014120852
SB2014120853
and 1 more
#VU41708 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-1934
CWE-59 Medium
No
No
- 08.05.2014 SB2014111908
SB2014111909
SB2014111910
#VU32536 - Heap-based Buffer Overflow
CVE-2014-0150
CWE-122 Low
No
No
- 18.04.2014 SB2014041803
SB2014052106
SB2014111811
and 2 more


Showing elements 12801 - 12820 out of 13394