Search CVE reports


Toggle filters

1161 – 1170 of 38356 results

Status is adjusted based on your filters.


CVE-2025-61146

Medium priority
Needs evaluation

saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c.

1 affected package

libsixel

Package 20.04 LTS
libsixel Needs evaluation
Show less packages

CVE-2025-61145

Low priority

Some fixes available 1 of 4

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 20.04 LTS
tiff Fixed
qtwebengine-opensource-src Needs evaluation
texmaker Needs evaluation
gdal Not affected
neuron Needs evaluation
Show less packages

CVE-2025-61144

Low priority

Some fixes available 1 of 4

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 20.04 LTS
tiff Fixed
qtwebengine-opensource-src Needs evaluation
texmaker Needs evaluation
gdal Not affected
neuron Needs evaluation
Show less packages

CVE-2025-61143

Low priority

Some fixes available 1 of 4

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 20.04 LTS
tiff Fixed
qtwebengine-opensource-src Needs evaluation
texmaker Needs evaluation
gdal Not affected
neuron Needs evaluation
Show less packages

CVE-2025-14905

Medium priority
Needs evaluation

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by...

1 affected package

389-ds-base

Package 20.04 LTS
389-ds-base Needs evaluation
Show less packages

CVE-2026-2968

Medium priority
Not affected

A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of the component Poly1305 Authentication Tag Handler. The manipulation results in...

2 affected packages

opencpn, swupdate

Package 20.04 LTS
opencpn Not affected
swupdate
Show less packages

CVE-2026-2967

Medium priority
Needs evaluation

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the component TCP Sequence Number Handler. The manipulation leads to...

1 affected package

opencpn

Package 20.04 LTS
opencpn Needs evaluation
Show less packages

CVE-2026-2966

Medium priority
Needs evaluation

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the component DNS Transaction ID Handler. Executing a manipulation of the argument random...

1 affected package

opencpn

Package 20.04 LTS
opencpn Needs evaluation
Show less packages

CVE-2026-2708

Medium priority
Needs evaluation

[libsoup: HTTP/1 request smuggling primitives accepted (CL.CL and TE+CL) in soup_headers_parse()]

2 affected packages

libsoup2.4, libsoup3

Package 20.04 LTS
libsoup2.4 Needs evaluation
libsoup3
Show less packages

CVE-2026-2913

Medium priority
Needs evaluation

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory of the file libvips/iofuncs/source.c. This manipulation causes heap-based buffer overflow. It is possible to...

1 affected package

vips

Package 20.04 LTS
vips Needs evaluation
Show less packages