Product by Red Hat
Red Hat fedora10
1,137 known vulnerabilities in Red Hat fedora10 (Red Hat), 31 of them actively exploited (CISA KEV).
Key figures
1,137
Vulnerabilities
31
Actively exploited (KEV)
6
Used by ransomware
118
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 75 other products | 10.0 | |
| Critical | CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability In CISA KEVRansomwarealso in 16 other products | 9.8 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomwarealso in 23 other products | 9.0 | |
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomwarealso in 40 other products | 9.0 | |
| Critical | CVE-2019-11043 | Underflow in PHP-FPM can lead to RCE In CISA KEVRansomwarealso in 23 other products | 8.7 | |
| Critical | CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability In CISA KEVRansomwarealso in 19 other products | 7.8 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 159 other products | 7.5 | |
| Critical | CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability In CISA KEValso in 16 other products | 9.8 | |
| Critical | CVE-2021-39226 | Snapshot authentication bypass in grafana In CISA KEValso in 3 other products | 9.8 | |
| Critical | CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability In CISA KEValso in 21 other products | 9.8 | |
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEValso in 31 other products | 7.8 | |
| Critical | CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability In CISA KEValso in 16 other products | 8.8 | |
| Critical | CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability In CISA KEValso in 15 other products | 8.8 | |
| Critical | CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability In CISA KEValso in 6 other products | 8.8 | |
| Critical | CVE-2021-39144 | XStream is vulnerable to a Remote Command Execution attack In CISA KEValso in 17 other products | 8.5 | |
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEValso in 47 other products | 7.8 | |
| Critical | CVE-2023-42917 | Apple Multiple Products WebKit Memory Corruption Vulnerability In CISA KEValso in 9 other products | 8.8 | |
| Critical | CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability In CISA KEValso in 8 other products | 9.8 | |
| Critical | CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability In CISA KEValso in 8 other products | 9.8 | |
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEValso in 31 other products | 7.8 | |
| Critical | CVE-2021-1789 | Apple Multiple Products Type Confusion Vulnerability In CISA KEValso in 10 other products | 8.8 | |
| Critical | CVE-2022-32893 | Apple iOS and macOS Out-of-Bounds Write Vulnerability In CISA KEValso in 11 other products | 8.8 | |
| Critical | CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability In CISA KEValso in 28 other products | 7.8 | |
| Critical | CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability In CISA KEValso in 20 other products | 7.5 | |
| Critical | CVE-2015-5477 | ISC BIND Data Processing Errors Vulnerability In CISA KEValso in 20 other products | 7.5 |
News
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- Flaws in Linux Kernel and Android Exploited, Added to CISA KEVsans-newsbites-mail,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,