Search CVE reports
21 – 30 of 54097 results
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c of the...
1 affected package
libvmdk
| Package | 24.04 LTS |
|---|---|
| libvmdk | Needs evaluation |
libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a...
1 affected package
libnxml
| Package | 24.04 LTS |
|---|---|
| libnxml | Needs evaluation |
eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_attributes() in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a...
1 affected package
ebook-speaker
| Package | 24.04 LTS |
|---|---|
| ebook-speaker | Needs evaluation |
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some...
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 24.04 LTS |
|---|---|
| openssh | Needs evaluation |
| openssh-ssh1 | Ignored |
| openssh-gssapi | Not in release |
A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow...
1 affected package
gdb
| Package | 24.04 LTS |
|---|---|
| gdb | Needs evaluation |
The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses are accepted as public, which can lead to Server-Side Request Forgery...
1 affected package
symfony
| Package | 24.04 LTS |
|---|---|
| symfony | Needs evaluation |
The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and...
1 affected package
symfony
| Package | 24.04 LTS |
|---|---|
| symfony | Needs evaluation |
mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or...
1 affected package
mpv
| Package | 24.04 LTS |
|---|---|
| mpv | Needs evaluation |
A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files against symlinks but checks the ~/.ssh directory only with os.path.exists(). An unprivileged user on a...
2 affected packages
ansible, ansible-core
| Package | 24.04 LTS |
|---|---|
| ansible | Needs evaluation |
| ansible-core | Needs evaluation |
Blosc c-blosc2 before 3.5.0 contains a divide-by-zero vulnerability in blosc2_schunk_get_slice_buffer() in blosc/schunk.c that allows attackers to crash applications by supplying crafted frames with unchecked zero chunksize or...
1 affected package
c-blosc2
| Package | 24.04 LTS |
|---|---|
| c-blosc2 | Needs evaluation |