FE
Product
Fedora
On CISA KEVExploited in the wildRansomware-linked
5,352
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 439High 49Medium 11Low 1
Watch
Add Fedora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44228 RansomwareIn wildKEV | 10.0 | Dec 10 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Affected: 34; 35 |
| CVE-2015-3306 In wildKEV | 10.0 | May 18 | ProFTPD Improper Access Control Vulnerability Affected: 20; 21; 22 |
| CVE-2024-4577 RansomwareIn wildKEV | 9.8 | Jun 9 | Argument Injection in PHP-CGI Affected: 39; 40 |
| CVE-2021-44026 In wildKEV | 9.8 | Nov 19 | Roundcube Webmail SQL Injection Vulnerability Affected: 33; 34 |
| CVE-2021-42013 RansomwareIn wildKEV | 9.8 | Oct 7 | Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) Affected: 34; 35 |
| CVE-2021-41773 RansomwareIn wildKEV | 9.8 | Oct 5 | Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Affected: 34; 35 |
| CVE-2021-1871 In wildKEV | 9.8 | Apr 2 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Affected: 33 |
| CVE-2021-1870 In wildKEV | 9.8 | Apr 2 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Affected: 32; 33 |
| CVE-2020-16846 In wildKEV | 9.8 | Nov 6 | SaltStack Salt Shell Injection Vulnerability Affected: 31 |
| CVE-2020-1938 In wildKEV | 9.8 | Feb 24 | Apache Tomcat Improper Privilege Management Vulnerability Affected: 30; 31; 32 |
| CVE-2020-7247 In wildKEV | 9.8 | Jan 29 | OpenSMTPD Remote Code Execution Vulnerability Affected: 32 |
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 30; 31 |
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 29; 30; 31 |
| CVE-2019-16928 In wildKEV | 9.8 | Sep 27 | Exim Out-of-bounds Write Vulnerability Affected: 29; 30; 31 |
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: 39; 40 |
| CVE-2024-5274 In wildKEV | 9.6 | May 28 | Google Chromium V8 Type Confusion Vulnerability Affected: 39; 40 |
| CVE-2024-4947 In wildKEV | 9.6 | May 15 | Google Chromium V8 Type Confusion Vulnerability Affected: 38; 39; 40 |
| CVE-2024-4671 In wildKEV | 9.6 | May 9 | Google Chromium Visuals Use-After-Free Vulnerability Affected: 38; 39; 40 |
| CVE-2023-6345 In wildKEV | 9.6 | Nov 29 | Google Skia Integer Overflow Vulnerability Affected: 37; 38; 39 |
| CVE-2023-2136 In wildKEV | 9.6 | Apr 19 | Google Chrome Skia Integer Overflow Vulnerability Affected: 36; 37; 38 |
| CVE-2022-3075 In wildKEV | 9.6 | Sep 26 | Google Chromium Mojo Insufficient Data Validation Vulnerability Affected: 37 |
| CVE-2021-37973 In wildKEV | 9.6 | Oct 8 | Google Chromium Portals Use-After-Free Vulnerability Affected: 33; 35 |
| CVE-2021-30633 In wildKEV | 9.6 | Oct 8 | Google Chromium Indexed DB API Use-After-Free Vulnerability Affected: 33; 35 |
| CVE-2020-15999 In wildKEV | 9.6 | Nov 3 | Google Chrome FreeType Heap Buffer Overflow Vulnerability Affected: 31 |
| CVE-2021-45046 RansomwareIn wildKEV | 9.0 | Dec 14 | Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack Affected: 34; 35 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 34; 35 |
Showing 26
The 500 most important CVEs for this product (exploited first, then by severity)