Known vulnerabilities in Fedora - page 654

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 13394
Public exploits: 703
Known exploited (KEV): 179
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 13394 known vulnerabilities: 103 critical, 3545 high, 5269 medium, 4476 low Critical High Medium Low

Vulnerabilities (13394)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78291 - Insecure Temporary File
CVE-2013-4251
CWE-377 Low
No
No
- 16.07.2023 SB2013101503
SB2013101506
#VU30374 - Session Fixation
CVE-2013-4572
CWE-384 Medium
No
No
- 06.02.2020 SB2020020622
SB2013112014
SB2014012905
#VU33104 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5743
CWE-89 High
Available
No
- 11.12.2019 SB2013100803
SB2013100203
SB2013100204
and 1 more
#VU501 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6388
CWE-79 Low
No
No
- 16.09.2016 SB2013122402
SB2013112106
SB2013112107
and 2 more
#VU500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6387
CWE-79 Low
No
No
- 16.09.2016 SB2013122401
SB2013112106
SB2013112107
and 2 more
#VU457 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2013-6389
CWE-601 High
No
No
- 15.09.2016 SB2013120702
SB2013112106
SB2013112107
and 2 more
#VU453 - Cross-Site Request Forgery (CSRF)
CVE-2013-6385
CWE-352 High
No
No
- 15.09.2016 SB2013120701
SB2013112106
SB2013112107
and 2 more
#VU41942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4433
CWE-79 Low
No
No
- 11.03.2014 SB2014031108
SB2013100120
#VU33103 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-6824
CWE-94 Medium
No
No
- 19.12.2013 SB2013120914
SB2014012304
SB2013120320
and 2 more
#VU42237 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4567
CWE-79 Low
No
No
- 13.12.2013 SB2013112504
SB2013112014
SB2014012905
#VU42238 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4568
CWE-79 Low
No
No
- 13.12.2013 SB2013112504
SB2013112014
SB2014012905
#VU42278 - Cryptographic Issues
CVE-2013-6386
CWE-310 Medium
No
No
- 07.12.2013 SB2013120709
SB2013112106
SB2013112107
and 2 more
#VU42394 - Permissions, Privileges, and Access Controls
CVE-2013-6617
CWE-264 High
No
No
- 05.11.2013 SB2013110505
SB2013101701
SB2013101702
#VU42395 - Permissions, Privileges, and Access Controls
CVE-2013-4439
CWE-264 Low
No
No
- 05.11.2013 SB2013110505
SB2013101701
SB2013101702
#VU42396 - Improper Authentication
CVE-2013-4435
CWE-287 Low
No
No
- 05.11.2013 SB2013110505
SB2013101701
SB2013101702
#VU42397 - Improper input validation
CVE-2013-4436
CWE-20 High
No
No
- 05.11.2013 SB2013110505
SB2013101701
SB2013101702
#VU42398 - Improper input validation
CVE-2013-4437
CWE-20 High
No
No
- 05.11.2013 SB2013110505
SB2013101701
SB2013101702
#VU42399 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4438
CWE-94 Medium
No
No
- 05.11.2013 SB2013110506
SB2013101701
SB2013101702
#VU32597 - Memory corruption
CVE-2013-4484
CWE-119 Medium
No
No
- 01.11.2013 SB2013110101
SB2013121307
SB2013112015
and 1 more
#VU42456 - Improper input validation
CVE-2013-4450
CWE-20 Medium
Available
No
- 21.10.2013 SB2013102101
SB2013101806


Showing elements 13061 - 13080 out of 13394