Search CVE reports
21 – 30 of 58502 results
Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcre_regex()...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Not in release
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics() and show_lyrics.inc.php. Attackers can...
1 affected package
ampache
| Package | 22.04 LTS |
|---|---|
| ampache | Not in release |
Not in release
FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and update_gdi_mem3blt() that retain stale brush cache pointers. A malicious RDP server can resend CACHE_BRUSH to...
1 affected package
freerdp
| Package | 22.04 LTS |
|---|---|
| freerdp | Not in release |
Not in release
Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can...
1 affected package
movim
| Package | 22.04 LTS |
|---|---|
| movim | Not in release |
Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR...
1 affected package
tinyproxy
| Package | 22.04 LTS |
|---|---|
| tinyproxy | Needs evaluation |
Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory....
1 affected package
munin
| Package | 22.04 LTS |
|---|---|
| munin | Needs evaluation |
FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2_buffer_swframe_to_buf() in libavcodec/v4l2_buffers.c that mishandles frames with negative linesize. Attackers can supply bottom-up AVI or PNM/PFM files...
1 affected package
ffmpeg
| Package | 22.04 LTS |
|---|---|
| ffmpeg | Needs evaluation |
FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves a stale extension_data reference that ff_cbs_sei_add_message() reuses. Attackers can supply a crafted H.264...
1 affected package
ffmpeg
| Package | 22.04 LTS |
|---|---|
| ffmpeg | Needs evaluation |
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the CineForm HD decoder that allows attackers to leak heap memory via unzeroed idwt_tmp buffers in libavcodec/cfhd.c. Attackers can supply a crafted...
1 affected package
ffmpeg
| Package | 22.04 LTS |
|---|---|
| ffmpeg | Needs evaluation |
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in the APAC decoder in libavcodec/apac.c caused by an unreset bitstream index. Attackers can supply a crafted APAC file whose growing...
1 affected package
ffmpeg
| Package | 22.04 LTS |
|---|---|
| ffmpeg | Needs evaluation |