Search CVE reports
11 – 20 of 44275 results
Not in release
A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger...
1 affected package
vtk
| Package | 26.04 LTS |
|---|---|
| vtk | Not in release |
Not in release
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CDSSO`) servlet allows a logged-in user's raw OpenAM session token to be POSTed to an attacker-controlled URL....
1 affected package
openam
| Package | 26.04 LTS |
|---|---|
| openam | Not in release |
Not in release
An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to...
1 affected package
vtk
| Package | 26.04 LTS |
|---|---|
| vtk | Not in release |
Not in release
An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to...
1 affected package
vtk
| Package | 26.04 LTS |
|---|---|
| vtk | Not in release |
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document exceeds max_errors. Python appends frames to the reused...
1 affected package
graphql-core
| Package | 26.04 LTS |
|---|---|
| graphql-core | Needs evaluation |
Not in release
Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips the scheme and checks only a host suffix without...
2 affected packages
golang-github-gofiber-fiber, golang-github-gofiber-fiber-v2
| Package | 26.04 LTS |
|---|---|
| golang-github-gofiber-fiber | Not in release |
| golang-github-gofiber-fiber-v2 | Not in release |
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.6, joserfc compact JWS deserialization calls bytes.split() before enforcing the existing...
1 affected package
joserfc
| Package | 26.04 LTS |
|---|---|
| joserfc | Needs evaluation |
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.5, joserfc.jwe.decrypt_json() accepts a JWE General JSON Serialization recipients array...
1 affected package
joserfc
| Package | 26.04 LTS |
|---|---|
| joserfc | Needs evaluation |
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes...
1 affected package
mariadb-connector-java
| Package | 26.04 LTS |
|---|---|
| mariadb-connector-java | Needs evaluation |
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recover() and...
1 affected package
mariadb-connector-java
| Package | 26.04 LTS |
|---|---|
| mariadb-connector-java | Needs evaluation |