Search CVE reports
51 – 60 of 31924 results
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of...
1 affected package
gnutls28
| Package | 24.04 LTS |
|---|---|
| gnutls28 | Needs evaluation |
Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fixes the issue. The issue only effects static files....
1 affected package
shiro
| Package | 24.04 LTS |
|---|---|
| shiro | Needs evaluation |
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.
1 affected package
roundcube
| Package | 24.04 LTS |
|---|---|
| roundcube | Needs evaluation |
[NULL dereference via C_DeriveKey with specific NULL parameters]
1 affected package
p11-kit
| Package | 24.04 LTS |
|---|---|
| p11-kit | Not affected |
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed...
1 affected package
mapnik
| Package | 24.04 LTS |
|---|---|
| mapnik | Needs evaluation |
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the...
1 affected package
vim
| Package | 24.04 LTS |
|---|---|
| vim | Needs evaluation |
Not in release
A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes...
1 affected package
llama.cpp
| Package | 24.04 LTS |
|---|---|
| llama.cpp | Not in release |
calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom...
1 affected package
calibre
| Package | 24.04 LTS |
|---|---|
| calibre | Needs evaluation |
calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion,...
1 affected package
calibre
| Package | 24.04 LTS |
|---|---|
| calibre | Needs evaluation |
calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this...
1 affected package
calibre
| Package | 24.04 LTS |
|---|---|
| calibre | Needs evaluation |