Search CVE reports
1 – 10 of 45005 results
Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalizeResponse method in modules/caddyhttp/reverseproxy/reverseproxy.go handles an upstream 101 Switching Protocols response...
1 affected package
caddy
| Package | 26.04 LTS |
|---|---|
| caddy | Needs evaluation |
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validate_token_request to check that the device_code...
1 affected package
python-oauthlib
| Package | 26.04 LTS |
|---|---|
| python-oauthlib | Needs evaluation |
Not in release
A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected;...
1 affected package
check-mk
| Package | 26.04 LTS |
|---|---|
| check-mk | Not in release |
[ssh: Read/write authorized keys file using user account privileges]
1 affected package
freedombox
| Package | 26.04 LTS |
|---|---|
| freedombox | Needs evaluation |
ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can...
1 affected package
imagemagick
| Package | 26.04 LTS |
|---|---|
| imagemagick | Needs evaluation |
A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The...
1 affected package
libvmdk
| Package | 26.04 LTS |
|---|---|
| libvmdk | Needs evaluation |
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c of the...
1 affected package
libvmdk
| Package | 26.04 LTS |
|---|---|
| libvmdk | Needs evaluation |
libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a...
1 affected package
libnxml
| Package | 26.04 LTS |
|---|---|
| libnxml | Needs evaluation |
eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_attributes() in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a...
1 affected package
ebook-speaker
| Package | 26.04 LTS |
|---|---|
| ebook-speaker | Needs evaluation |
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some...
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS |
|---|---|
| openssh | Needs evaluation |
| openssh-ssh1 | Ignored |
| openssh-gssapi | Not in release |