Vulnerabilities > Fedoraproject > Fedora

DATE CVE VULNERABILITY TITLE RISK
2023-08-29 CVE-2023-41358 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in FRRouting FRR through 9.0.
network
low complexity
frrouting debian fedoraproject CWE-476
7.5
2023-08-29 CVE-2023-41359 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in FRRouting FRR through 9.0.
network
low complexity
frrouting fedoraproject CWE-125
critical
9.1
2023-08-29 CVE-2023-41360 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in FRRouting FRR through 9.0.
network
low complexity
frrouting debian fedoraproject CWE-125
critical
9.1
2023-08-25 CVE-2023-40587 Pyramid is an open source Python web framework.
network
low complexity
agendaless fedoraproject
5.3
2023-08-25 CVE-2023-38201 A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration.
low complexity
keylime redhat fedoraproject
6.5
2023-08-23 CVE-2023-3899 Incorrect Authorization vulnerability in multiple products
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization.
local
low complexity
redhat fedoraproject CWE-863
7.8
2023-08-23 CVE-2023-4427 Out-of-bounds Read vulnerability in multiple products
Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
network
low complexity
google fedoraproject CWE-125
8.1
2023-08-23 CVE-2023-4428 Out-of-bounds Read vulnerability in multiple products
Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-125
8.1
2023-08-23 CVE-2023-4429 Use After Free vulnerability in multiple products
Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2023-08-23 CVE-2023-4430 Use After Free vulnerability in multiple products
Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8