Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-29	CVE-2023-40549	Out-of-bounds Read vulnerability in multiple products An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. local low complexity redhat fedoraproject CWE-125	5.5
2024-01-29	CVE-2023-40550	Out-of-bounds Read vulnerability in multiple products An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. local low complexity redhat fedoraproject CWE-125	5.5
2024-01-29	CVE-2023-40551	Out-of-bounds Read vulnerability in multiple products A flaw was found in the MZ binary format in Shim. local low complexity redhat fedoraproject CWE-125	5.1
2024-01-24	CVE-2024-0805	Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0809	Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0811	Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0814	Origin Validation Error vulnerability in multiple products Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. network low complexity google fedoraproject CWE-346	6.5
2024-01-19	CVE-2024-22420	Cross-site Scripting vulnerability in multiple products JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. network low complexity jupyter fedoraproject CWE-79	6.1
2024-01-19	CVE-2024-22421	Relative Path Traversal vulnerability in multiple products JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. network low complexity jupyter fedoraproject CWE-23	6.5
2024-01-18	CVE-2024-0408	A flaw was found in the X.Org server. local low complexity x-org tigervnc redhat fedoraproject	5.5