Vulnerabilities > Fedoraproject > Fedora > 35

DATE	CVE	VULNERABILITY TITLE	RISK
2022-09-23	CVE-2022-3278	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. local low complexity vim fedoraproject	5.5
2022-09-23	CVE-2022-36944	Deserialization of Untrusted Data vulnerability in multiple products Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. network low complexity scala-lang fedoraproject CWE-502 critical	9.8
2022-09-23	CVE-2022-40188	Algorithmic Complexity vulnerability in multiple products Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. network low complexity nic fedoraproject debian CWE-407	7.5
2022-09-22	CVE-2022-3256	Use After Free in GitHub repository vim/vim prior to 9.0.0530. local low complexity vim fedoraproject debian	7.8
2022-09-21	CVE-2022-2795	By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service. network low complexity isc debian fedoraproject	5.3
2022-09-21	CVE-2022-38177	Memory Leak vulnerability in multiple products By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. network low complexity isc debian fedoraproject netapp CWE-401	7.5
2022-09-21	CVE-2022-38178	Memory Leak vulnerability in multiple products By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. network low complexity isc debian fedoraproject netapp CWE-401	7.5
2022-09-21	CVE-2022-3080	By sending specific queries to the resolver, an attacker can cause named to crash. network low complexity isc fedoraproject	7.5
2022-09-20	CVE-2022-32886	Out-of-bounds Write vulnerability in multiple products A buffer overflow issue was addressed with improved memory handling. network low complexity apple fedoraproject debian CWE-787	8.8
2022-09-20	CVE-2022-39955	The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. network low complexity owasp fedoraproject debian critical	9.8