Search CVE reports
21 – 30 of 30209 results
Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information...
1 affected package
wolfssl
| Package | 24.04 LTS |
|---|---|
| wolfssl | Needs evaluation |
ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its ReadTIMImage function...
1 affected package
imagemagick
| Package | 24.04 LTS |
|---|---|
| imagemagick | Needs evaluation |
A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.
1 affected package
usbmuxd
| Package | 24.04 LTS |
|---|---|
| usbmuxd | Needs evaluation |
[Unknown description]
1 affected package
smb4k
| Package | 24.04 LTS |
|---|---|
| smb4k | Needs evaluation |
[Unknown description]
1 affected package
smb4k
| Package | 24.04 LTS |
|---|---|
| smb4k | Needs evaluation |
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.
1 affected package
rust-sd
| Package | 24.04 LTS |
|---|---|
| rust-sd | Needs evaluation |
An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.
1 affected package
freeimage
| Package | 24.04 LTS |
|---|---|
| freeimage | Needs evaluation |
Not in release
Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP...
1 affected package
dotclear
| Package | 24.04 LTS |
|---|---|
| dotclear | Not in release |
The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when...
2 affected packages
cni, golang-github-containernetworking-plugins
| Package | 24.04 LTS |
|---|---|
| cni | Not in release |
| golang-github-containernetworking-plugins | Needs evaluation |
Buffer underflow on Glib through glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write
1 affected package
glib2.0
| Package | 24.04 LTS |
|---|---|
| glib2.0 | Needs evaluation |