Fedora

DATE	CVE	VULNERABILITY TITLE	RISK
2022-09-26	CVE-2022-21797	The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement. network low complexity joblib-project fedoraproject debian critical	9.8
2022-09-25	CVE-2022-3297	Use After Free in GitHub repository vim/vim prior to 9.0.0579. local low complexity vim fedoraproject	7.8
2022-09-25	CVE-2022-3296	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. local low complexity vim fedoraproject	7.8
2022-09-23	CVE-2022-3278	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. local low complexity vim fedoraproject	5.5
2022-09-23	CVE-2022-36944	Deserialization of Untrusted Data vulnerability in multiple products Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. network low complexity scala-lang fedoraproject CWE-502 critical	9.8
2022-09-23	CVE-2022-40188	Algorithmic Complexity vulnerability in multiple products Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. network low complexity nic fedoraproject debian CWE-407	7.5
2022-09-23	CVE-2022-41322	Improper Encoding or Escaping of Output vulnerability in multiple products In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. local low complexity kitty-project fedoraproject CWE-116	7.8
2022-09-23	CVE-2022-35951	Integer Overflow or Wraparound vulnerability in multiple products Redis is an in-memory database that persists on disk. network low complexity redis fedoraproject CWE-190 critical	9.8
2022-09-22	CVE-2022-1941	A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of memory failures. network low complexity google fedoraproject debian	7.5
2022-09-22	CVE-2022-3256	Use After Free in GitHub repository vim/vim prior to 9.0.0530. local low complexity vim fedoraproject debian	7.8