Search CVE reports
921 – 930 of 37173 results
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
1 affected package
fluidsynth
| Package | 20.04 LTS |
|---|---|
| fluidsynth | Needs evaluation |
A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active....
1 affected package
wget2
| Package | 20.04 LTS |
|---|---|
| wget2 | Needs evaluation |
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to...
1 affected package
wget2
| Package | 20.04 LTS |
|---|---|
| wget2 | Needs evaluation |
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' (as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 ) has leading zeros and is...
1 affected package
node-elliptic
| Package | 20.04 LTS |
|---|---|
| node-elliptic | Needs evaluation |
Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safe_join function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are...
1 affected package
python-werkzeug
| Package | 20.04 LTS |
|---|---|
| python-werkzeug | Not affected |
Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON. A regression introduced in Preact 10.26.5 caused this protection to be...
1 affected package
node-preact
| Package | 20.04 LTS |
|---|---|
| node-preact | Needs evaluation |
An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ?...
1 affected package
smb4k
| Package | 20.04 LTS |
|---|---|
| smb4k | Needs evaluation |
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper
1 affected package
smb4k
| Package | 20.04 LTS |
|---|---|
| smb4k | Needs evaluation |
The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests...
1 affected package
modsecurity-crs
| Package | 20.04 LTS |
|---|---|
| modsecurity-crs | Needs evaluation |
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can...
2 affected packages
libsoup2.4, libsoup3
| Package | 20.04 LTS |
|---|---|
| libsoup2.4 | Vulnerable |
| libsoup3 | — |