Fedora

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-16	CVE-2023-3195	Out-of-bounds Write vulnerability in multiple products A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. local low complexity imagemagick fedoraproject CWE-787	5.5
2023-06-16	CVE-2023-2431	A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. local low complexity kubernetes fedoraproject	5.5
2023-06-14	CVE-2023-30631	Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server. The configuration option proxy.config.http.push_method_enabled didn't function. However, by default the PUSH method is blocked in the ip_allow configuration file.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0. 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions network low complexity apache debian fedoraproject	7.5
2023-06-13	CVE-2023-3214	Use After Free vulnerability in multiple products Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google debian fedoraproject CWE-416	8.8
2023-06-13	CVE-2023-3215	Use After Free vulnerability in multiple products Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google debian fedoraproject CWE-416	8.8
2023-06-13	CVE-2023-3216	Type Confusion vulnerability in multiple products Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google debian fedoraproject CWE-843	8.8
2023-06-13	CVE-2023-3217	Use After Free vulnerability in multiple products Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google debian fedoraproject CWE-416	8.8
2023-06-13	CVE-2023-20867	Improper Authentication vulnerability in multiple products A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. local high complexity vmware debian fedoraproject CWE-287	3.9
2023-06-12	CVE-2023-3161	Incorrect Calculation vulnerability in multiple products A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. local low complexity linux fedoraproject redhat CWE-682	5.5
2023-06-09	CVE-2023-2454	schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code. network low complexity postgresql redhat fedoraproject	7.2