Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-29	CVE-2023-40546	NULL Pointer Dereference vulnerability in multiple products A flaw was found in Shim when an error happened while creating a new ESL variable. local low complexity redhat fedoraproject CWE-476	5.5
2024-01-29	CVE-2023-40549	Out-of-bounds Read vulnerability in multiple products An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. local low complexity redhat fedoraproject CWE-125	5.5
2024-01-29	CVE-2023-40550	Out-of-bounds Read vulnerability in multiple products An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. local low complexity redhat fedoraproject CWE-125	5.5
2024-01-29	CVE-2023-40551	Out-of-bounds Read vulnerability in multiple products A flaw was found in the MZ binary format in Shim. local low complexity redhat fedoraproject CWE-125	5.1
2024-01-24	CVE-2024-0805	Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0809	Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0811	Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0814	Origin Validation Error vulnerability in multiple products Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. network low complexity google fedoraproject CWE-346	6.5
2024-01-19	CVE-2024-22420	Cross-site Scripting vulnerability in multiple products JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. network low complexity jupyter fedoraproject CWE-79	6.1
2024-01-19	CVE-2024-22421	JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. network low complexity jupyter fedoraproject	6.5