Known vulnerabilities in Fedora - page 649

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13394
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13394 known vulnerabilities: 103 critical, 3545 high, 5269 medium, 4476 low Critical High Medium Low

Vulnerabilities (13394)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35066 - Improper input validation
CVE-2014-0021
CWE-20 Medium
No
No
- 15.11.2019 SB2014070909
SB2014070204
SB2014070205
#VU31374 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-4914
CWE-89 High
No
No
- 29.12.2017 SB2017122908
SB2014082104
SB2014071202
#VU499 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5022
CWE-79 Low
No
No
- 16.09.2016 SB2015092616
SB2014071607
SB2014071608
and 4 more
#VU498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5021
CWE-79 Low
No
No
- 16.09.2016 SB2015092616
SB2014071607
SB2014071608
and 4 more
#VU448 - Improper Access Control
CVE-2014-5020
CWE-284 Low
No
No
- 14.09.2016 SB2015092616
SB2014071607
SB2014071608
and 4 more
#VU447 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2014-5019
CWE-113 Low
No
No
- 14.09.2016 SB2015092616
SB2014071607
SB2014071608
and 4 more
#VU41449 - Improper Authentication
CVE-2014-3552
CWE-287 Low
No
No
- 29.07.2014 SB2014072908
SB2014072108
#VU41450 - Permissions, Privileges, and Access Controls
CVE-2014-3553
CWE-264 Low
No
No
- 29.07.2014 SB2014072907
SB2014072108
#VU33089 - Improper input validation
CVE-2014-0477
CWE-20 Medium
No
No
- 03.07.2014 SB2014072105
SB2014062103
SB2014062104
#VU41502 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4002
CWE-79 Low
No
No
- 03.07.2014 SB2014072305
SB2014062701
SB2014062702
#VU32521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4348
CWE-79 Low
No
No
- 25.06.2014 SB2014062502
SB2014062505
SB2014071904
and 1 more
#VU32522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4349
CWE-79 Low
No
No
- 25.06.2014 SB2014062504
SB2014062506
SB2014071904
and 1 more
#VU41570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3966
CWE-79 Low
No
No
- 06.06.2014 SB2014060607
SB2014062603
SB2014062604
and 2 more
#VU41683 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-3225
CWE-22 Low
Available
No
- 14.05.2014 SB2014051415
SB2014071802
SB2014071803
#VU32574 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-1879
CWE-79 Low
No
No
- 20.02.2014 SB2014022002
SB2014030509
SB2014071904
and 1 more
#VU42654 - Improper input validation
CVE-2013-5029
CWE-20 Medium
No
No
- 20.08.2013 SB2013110411
SB2014071904
#VU32642 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4998
CWE-200 Medium
No
No
- 31.07.2013 SB2013073105
SB2013080114
SB2013110411
and 2 more
#VU32643 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4999
CWE-200 Medium
No
No
- 31.07.2013 SB2013073106
SB2013080115
SB2013110411
and 2 more
#VU32644 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5000
CWE-200 Medium
No
No
- 31.07.2013 SB2013073107
SB2013080116
SB2013110411
and 2 more
#VU32647 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5003
CWE-89 Low
No
No
- 31.07.2013 SB2013073110
SB2013080119
SB2013110411
and 2 more


Showing elements 12961 - 12980 out of 13394