Search CVE reports
1 – 10 of 41109 results
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes...
1 affected package
libmodplug
| Package | 26.04 LTS |
|---|---|
| libmodplug | Needs evaluation |
OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a...
1 affected package
openrefine
| Package | 26.04 LTS |
|---|---|
| openrefine | Needs evaluation |
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that...
1 affected package
libhangul
| Package | 26.04 LTS |
|---|---|
| libhangul | Needs evaluation |
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with...
1 affected package
libextutils-typemaps-default-perl
| Package | 26.04 LTS |
|---|---|
| libextutils-typemaps-default-perl | Needs evaluation |
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap...
1 affected package
luksmeta
| Package | 26.04 LTS |
|---|---|
| luksmeta | Needs evaluation |
ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation...
1 affected package
libextutils-typemaps-default-perl
| Package | 26.04 LTS |
|---|---|
| libextutils-typemaps-default-perl | Needs evaluation |
Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing...
1 affected package
guava-libraries
| Package | 26.04 LTS |
|---|---|
| guava-libraries | Needs evaluation |
2 affected packages
cups-filters, libcupsfilters
| Package | 26.04 LTS |
|---|---|
| cups-filters | Needs evaluation |
| libcupsfilters | Needs evaluation |
ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with...
1 affected package
libextutils-typemaps-default-perl
| Package | 26.04 LTS |
|---|---|
| libextutils-typemaps-default-perl | Needs evaluation |
[Unknown description]
26 affected packages
golang-golang-x-net, google-guest-agent, google-osconfig-agent, containerd, golang-golang-x-net-dev...
| Package | 26.04 LTS |
|---|---|
| golang-golang-x-net | Needs evaluation |
| google-guest-agent | Needs evaluation |
| google-osconfig-agent | Needs evaluation |
| containerd | Needs evaluation |
| golang-golang-x-net-dev | Not in release |
| adsys | Needs evaluation |
| juju-core | Not in release |
| lxd | Not in release |
| golang | Not in release |
| golang-1.6 | Not in release |
| golang-1.8 | Not in release |
| golang-1.9 | Not in release |
| golang-1.10 | Not in release |
| golang-1.13 | Not in release |
| golang-1.14 | Not in release |
| golang-1.16 | Not in release |
| golang-1.17 | Not in release |
| golang-1.18 | Not in release |
| golang-1.20 | Not in release |
| golang-1.21 | Not in release |
| golang-1.22 | Not in release |
| golang-1.23 | Needs evaluation |
| golang-1.24 | Needs evaluation |
| golang-1.25 | Needs evaluation |
| golang-1.26 | Needs evaluation |
| golang-1.27 | Not in release |