FE
Product
Fedora
On CISA KEVExploited in the wildRansomware-linked
5,352
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch
Add Fedora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21166 In wildKEV | 8.8 | Mar 9 | Google Chromium Race Condition Vulnerability Affected: 32; 33; 34 |
| CVE-2021-21148 In wildKEV | 8.8 | Feb 9 | Google Chromium V8 Heap Buffer Overflow Vulnerability Affected: 32; 33 |
| CVE-2020-13671 In wildKEV | 8.8 | Nov 20 | Drupal core Un-restricted Upload of File Affected: 32; 33 |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: 32; 33 |
| CVE-2020-6418 In wildKEV | 8.8 | Feb 27 | Google Chromium V8 Type Confusion Vulnerability Affected: 30; 31 |
| CVE-2021-39144 In wildKEV | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack Affected: 33; 34; 35 |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: 39 |
| CVE-2023-7101 In wildKEV | 7.8 | Dec 24 | Arbitrary Code Execution (ACE) Vulnerability Affected: 38; 39 |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 37; 38; 39 |
| CVE-2022-0995 In wildKEV | 7.8 | Mar 25 | Linux Kernel Out-of-Bounds Write Vulnerability Affected: 35 |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 35 |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: 35 |
| CVE-2021-30952 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Affected: 34; 35 |
| CVE-2021-22204 In wildKEV | 7.8 | Apr 23 | ExifTool Remote Code Execution Vulnerability Affected: 32; 33; 34 |
| CVE-2021-3156 In wildKEV | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability Affected: 32; 33 |
| CVE-2020-28949 In wildKEV | 7.8 | Nov 19 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability Affected: 32; 33; 34; 35 |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: 29 |
| CVE-2019-0211 In wildKEV | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability Affected: 28; 29; 30 |
| CVE-2023-38180 In wildKEV | 7.5 | Aug 8 | .NET and Visual Studio Denial of Service Vulnerability Affected: 37; 38 |
| CVE-2020-36193 In wildKEV | 7.5 | Jan 18 | PEAR Archive_Tar Improper Link Resolution Vulnerability Affected: 32; 33; 34; 35 |
| CVE-2019-5418 In wildKEV | 7.5 | Mar 27 | Rails Ruby on Rails Path Traversal Vulnerability Affected: 30 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 21; 22 |
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 19; 20 |
| CVE-2021-39226 In wildKEV | 7.3 | Oct 5 | Snapshot authentication bypass in grafana Affected: 34; 35 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 23; 24; 25 |
| CVE-2023-42916 In wildKEV | 6.5 | Nov 30 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Affected: 38; 39 |
| CVE-2022-2856 In wildKEV | 6.5 | Sep 26 | Google Chromium Intents Insufficient Input Validation Vulnerability Affected: 37 |
| CVE-2021-37976 In wildKEV | 6.5 | Oct 8 | Google Chromium Information Disclosure Vulnerability Affected: 33; 34; 35 |
| CVE-2021-30533 In wildKEV | 6.5 | Jun 7 | Google Chromium PopupBlocker Security Bypass Vulnerability Affected: 33; 34 |
| CVE-2021-38000 In wildKEV | 6.1 | Nov 23 | Google Chromium Intents Improper Input Validation Vulnerability Affected: 34 |
| CVE-2020-35730 In wildKEV | 6.1 | Dec 28 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: 32; 33 |
| CVE-2020-13965 In wildKEV | 6.1 | Jun 9 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Affected: 31; 32 |
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 31; 32; 33 |
| CVE-2020-1472 RansomwareIn wildKEV | 5.5 | Aug 17 | Netlogon Elevation of Privilege Vulnerability Affected: 31; 32; 33 |
| CVE-2023-5631 In wildKEV | 5.4 | Oct 18 | Stored XSS vulnerability in Roundcube Affected: 39 |
| CVE-2022-23134 In wildKEV | 5.3 | Jan 13 | Possible view of the setup pages by unauthenticated users if config file already exists Affected: 34; 35 |
| CVE-2023-20867 In wildKEV | 3.9 | Jun 13 | VMware Tools Authentication Bypass Vulnerability Affected: 37; 38; 39 |
The 500 most important CVEs for this product (exploited first, then by severity)