Search CVE reports
331 – 340 of 41184 results
[Unknown description]
1 affected package
dulwich
| Package | 20.04 LTS |
|---|---|
| dulwich | Needs evaluation |
[Unknown description]
2 affected packages
otrs2, znuny
| Package | 20.04 LTS |
|---|---|
| otrs2 | Needs evaluation |
| znuny | — |
[Unknown description]
1 affected package
edk2
| Package | 20.04 LTS |
|---|---|
| edk2 | Needs evaluation |
A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs...
1 affected package
glib-networking
| Package | 20.04 LTS |
|---|---|
| glib-networking | Vulnerable |
In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the...
1 affected package
neutron
| Package | 20.04 LTS |
|---|---|
| neutron | Needs evaluation |
Music Player Daemon (MPD) before version 0.24.11 contains a CRLF injection vulnerability in the xspf_char_data function within the XSPF playlist plugin that allows attackers to embed literal CR/LF bytes in URI fields by supplying...
1 affected package
mpd
| Package | 20.04 LTS |
|---|---|
| mpd | Needs evaluation |
Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CURLOPT_REDIR_PROTOCOLS_STR, allowing unauthenticated attackers...
1 affected package
mpd
| Package | 20.04 LTS |
|---|---|
| mpd | Needs evaluation |
Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the local storage plugin, where the on-disk path is constructed by joining the...
1 affected package
mpd
| Package | 20.04 LTS |
|---|---|
| mpd | Needs evaluation |
Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an...
1 affected package
mpd
| Package | 20.04 LTS |
|---|---|
| mpd | Needs evaluation |
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via...
1 affected package
keystone
| Package | 20.04 LTS |
|---|---|
| keystone | Needs evaluation |