Search CVE reports
1 – 10 of 50193 results
The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize applies no origin trust boundary in Mechanize::HTTP::Agent#response_follow_meta_refresh when Mechanize#follow_meta_refresh is...
1 affected package
ruby-mechanize
| Package | 24.04 LTS |
|---|---|
| ruby-mechanize | Needs evaluation |
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An...
1 affected package
golang-mongodb-mongo-driver
| Package | 24.04 LTS |
|---|---|
| golang-mongodb-mongo-driver | Needs evaluation |
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide...
1 affected package
mongo-c-driver
| Package | 24.04 LTS |
|---|---|
| mongo-c-driver | Needs evaluation |
2 affected packages
libcupsfilters, cups-filters
| Package | 24.04 LTS |
|---|---|
| libcupsfilters | Needs evaluation |
| cups-filters | Needs evaluation |
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes...
1 affected package
libmodplug
| Package | 24.04 LTS |
|---|---|
| libmodplug | Needs evaluation |
OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a...
1 affected package
openrefine
| Package | 24.04 LTS |
|---|---|
| openrefine | Needs evaluation |
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that...
1 affected package
libhangul
| Package | 24.04 LTS |
|---|---|
| libhangul | Needs evaluation |
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with...
1 affected package
libextutils-typemaps-default-perl
| Package | 24.04 LTS |
|---|---|
| libextutils-typemaps-default-perl | Needs evaluation |
heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.
1 affected package
mutt
| Package | 24.04 LTS |
|---|---|
| mutt | Needs evaluation |
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap...
1 affected package
luksmeta
| Package | 24.04 LTS |
|---|---|
| luksmeta | Needs evaluation |