VendorsFedora Projectfedora37
Vulnerabilities

Fedora Project Fedora 37

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

698CVEs
CVE-2022-3199
Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2022-09-26 · Modified
8.8EPSS 0.024
CVE-2021-21408
Access to restricted PHP code by dynamic static class access in smarty
Published 2022-01-10 · Modified
8.8EPSS 0.022
CVE-2023-32004
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.
Published 2023-08-15 · Modified
8.8EPSS 0.021
CVE-2022-2853
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Published 2022-09-26 · Modified
8.8EPSS 0.021
CVE-2023-39359
Authenticated SQL injection vulnerability in graphs.php in Cacti
Published 2023-09-05 · Modified
8.8EPSS 0.021
CVE-2023-39358
Authenticated SQL injection vulnerability in reports_user.php in Cacti
Published 2023-09-05 · Modified
8.8EPSS 0.020
CVE-2021-29454
Sandbox Escape by math function in smarty
Published 2022-01-10 · Modified
8.8EPSS 0.019
CVE-2022-32886
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Published 2022-09-20 · Modified
8.8EPSS 0.019
CVE-2023-39357
A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti
Published 2023-09-05 · Modified
8.8EPSS 0.018
CVE-2023-4352
Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-08-15 · Modified
8.8EPSS 0.018
CVE-2023-5002
Pgadmin4: remote code execution by an authenticated user
Published 2023-09-22 · Modified
8.8EPSS 0.018
CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-10-05 · Modified
8.8EPSS 0.018
CVE-2023-42852
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
Published 2023-10-25 · Modified
8.8EPSS 0.017
CVE-2023-4354
Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-08-15 · Modified
8.8EPSS 0.017
CVE-2022-3550
X.org Server xkb.c _GetCountedString buffer overflow
Published 2022-10-17 · Modified
8.8EPSS 0.016
CVE-2022-42823
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
Published 2022-11-01 · Modified
8.8EPSS 0.015
CVE-2023-32006
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
Published 2023-08-15 · Modified
8.8EPSS 0.015
CVE-2022-44638
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
Published 2022-11-03 · Modified
8.8EPSS 0.015
CVE-2023-35074
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
Published 2023-09-26 · Modified
8.8EPSS 0.014
CVE-2023-39928
A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.
Published 2023-10-06 · Modified
8.8EPSS 0.014
CVE-2023-43655
Remote Code Execution via web-accessible composer.phar
Published 2023-09-29 · Analyzed
8.8EPSS 0.014
CVE-2023-37536
HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3
Published 2023-10-11 · Modified
8.8EPSS 0.014
CVE-2022-46342
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se
Published 2022-12-14 · Modified
8.8EPSS 0.014
CVE-2022-47318
ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.
Published 2023-01-17 · Modified
8.8EPSS 0.014
CVE-2023-1534
Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-03-21 · Modified
8.8EPSS 0.013
CVE-2022-40320
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.
Published 2022-09-09 · Modified
8.8EPSS 0.013
CVE-2023-5218
Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Published 2023-10-11 · Modified
8.8EPSS 0.013
CVE-2023-1532
Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-03-21 · Modified
8.8EPSS 0.013
CVE-2023-5857
Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium)
Published 2023-11-01 · Modified
8.8EPSS 0.013
CVE-2022-3195
Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
Published 2022-09-26 · Modified
8.8EPSS 0.013
CVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Published 2022-10-13 · Modified
8.8EPSS 0.013
CVE-2023-5849
Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published 2023-11-01 · Modified
8.8EPSS 0.013
CVE-2023-5856
Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Published 2023-11-01 · Modified
8.8EPSS 0.012
CVE-2022-39170
libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
Published 2022-09-02 · Modified
8.8EPSS 0.012
CVE-2022-3045
Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published 2022-09-26 · Modified
8.8EPSS 0.012
CVE-2022-39286
Execution with Unnecessary Privileges in JupyterApp
Published 2022-10-26 · Modified
8.8EPSS 0.011
CVE-2022-4907
Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published 2023-07-28 · Modified
8.8EPSS 0.011
CVE-2023-5854
Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
Published 2023-11-01 · Modified
8.8EPSS 0.011
CVE-2022-3640
Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free
Published 2022-10-21 · Modified
8.8EPSS 0.011
CVE-2023-2137
Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Published 2023-04-19 · Modified
8.8EPSS 0.011
← Prev3 / 18Next →