Known vulnerabilities in Fedora - page 675

Software: Fedora
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 14151
Public exploits: 709
Known exploited (KEV): 187

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fedora Fedora is affected by 14151 known vulnerabilities: 106 critical, 3830 high, 5519 medium, 4695 low Critical High Medium Low

Vulnerabilities (14151)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74019 - Improper Initialization
CVE-2022-2196
CWE-665 Low
No
No
- 24.03.2023 SB2023032425
SB2023032426
SB2023032806
and 45 more
#VU72633 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-46391
CWE-79 Low
No
No
- 28.02.2023 SB2023022867
SB2023022868
SB2023081652
and 4 more
#VU71583 - Use After Free
CVE-2022-4379
CWE-416 Medium
No
No
- 26.01.2023 SB2023012647
SB2023012648
SB2023012649
and 33 more
#VU71491 - Improper Verification of Cryptographic Signature
CVE-2022-46176
CWE-347 Medium
No
No
- 24.01.2023 SB2023012481
SB2023012485
SB2023012486
and 6 more
#VU71039 - Improper input validation
CVE-2023-21538
CWE-20 Medium
No
No
- 11.01.2023 SB2023011102
SB2023011104
SB2023011236
and 7 more
#VU70788 - Integer overflow
CVE-2022-31631
CWE-190 Medium
No
No
- 07.01.2023 SB2023010702
SB2023010704
SB2023011201
and 21 more
#VU70721 - Out-of-bounds read
CVE-2023-0049
CWE-125 Low
No
No
- 05.01.2023 SB2023010521
SB2023010522
SB2023013071
and 18 more
#VU70698 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22464
CWE-79 Low
No
No
- 04.01.2023 SB2023010436
SB2023081632
#VU70667 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22456
CWE-79 Low
No
No
- 03.01.2023 SB2023010330
SB2023081632
#VU70426 - Improper Authorization
CVE-2022-46169
CWE-285 Critical
Available
Exploited
- 19.12.2022 SB2022121926
SB2022121931
SB2023012480
and 6 more
#VU70096 - NULL Pointer Dereference
CVE-2022-37290
CWE-476 Low
No
No
- 09.12.2022 SB2022120921
SB2022120922
SB2022120923
and 12 more
#VU69545 - Incorrect Default Permissions
CVE-2022-41946
CWE-276 Low
No
No
- 23.11.2022 SB2022112335
SB2023010922
SB2023011025
and 42 more
#VU55102 - Resource exhaustion
CVE-2021-35065
CWE-400 Medium
No
No
- 21.07.2021 SB2021072101
SB2023020668
SB2023020971
and 24 more
#VU30739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18635
CWE-79 Low
Available
No
- 26.09.2019 SB2019092620
SB2023010242
SB2020092116
#VU39396 - NULL Pointer Dereference
CVE-2016-8887
CWE-476 Medium
No
No
- 23.03.2017 SB2017032318
#VU40859 - Data Handling
CVE-2015-1827
CWE-19 Medium
No
No
- 30.03.2015 SB2015033004
#VU40900 - Memory corruption
CVE-2015-1462
CWE-119 Medium
No
No
- 03.02.2015 SB2015020306
SB2015021704
#VU40901 - Improper input validation
CVE-2015-1463
CWE-20 Medium
No
No
- 03.02.2015 SB2015020307
SB2015021704
#VU40902 - Memory corruption
CVE-2015-1461
CWE-119 Medium
No
No
- 03.02.2015 SB2015020308
SB2015021704
#VU42167 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2010-0746
CWE-22 Medium
No
No
- 13.01.2014 SB2014011301


Showing elements 13481 - 13500 out of 14151