Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-16	CVE-2024-20926	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). network high complexity oracle netapp debian	5.9
2023-12-24	CVE-2023-51766	Insufficient Verification of Data Authenticity vulnerability in multiple products Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. network low complexity exim fedoraproject debian CWE-345	5.3
2023-12-19	CVE-2023-50761	The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. network low complexity mozilla debian	4.3
2023-12-19	CVE-2023-50762	When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. network low complexity mozilla debian	4.3
2023-12-19	CVE-2023-6857	Race Condition vulnerability in multiple products When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. network high complexity mozilla debian CWE-362	5.3
2023-12-19	CVE-2023-6860	The `VideoBridge` allowed any content process to use textures produced by remote decoders. network low complexity mozilla debian	6.5
2023-12-19	CVE-2023-6865	`EncryptingOutputStream` was susceptible to exposing uninitialized data. network low complexity mozilla debian	6.5
2023-12-19	CVE-2023-6867	Improper Restriction of Rendered UI Layers or Frames vulnerability in multiple products The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. network low complexity mozilla debian CWE-1021	6.1
2023-12-18	CVE-2023-51384	In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. local low complexity openbsd debian	5.5
2023-12-18	CVE-2023-51385	OS Command Injection vulnerability in multiple products In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. network low complexity openbsd debian CWE-78	6.5