Search CVE reports
1 – 10 of 30123 results
berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.
1 affected package
berkeley-abc
| Package | 22.04 LTS |
|---|---|
| berkeley-abc | Needs evaluation |
When a non-x86 platform is detected, cloud-init grants root access to a hard coded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.
1 affected package
cloud-init
| Package | 22.04 LTS |
|---|---|
| cloud-init | Vulnerable |
cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This being used for the "/run/cloud-init/hook-hotplug-cmd" FIFO....
1 affected package
cloud-init
| Package | 22.04 LTS |
|---|---|
| cloud-init | Vulnerable |
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is...
1 affected package
ruby-webrick
| Package | 22.04 LTS |
|---|---|
| ruby-webrick | Needs evaluation |
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson...
1 affected package
jackson-core
| Package | 22.04 LTS |
|---|---|
| jackson-core | Needs evaluation |
Not in release
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data....
1 affected package
golang-github-go-viper-mapstructure
| Package | 22.04 LTS |
|---|---|
| golang-github-go-viper-mapstructure | Not in release |
Not in release
Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options `security.mac_filtering`,...
1 affected package
incus
| Package | 22.04 LTS |
|---|---|
| incus | Not in release |
Not in release
Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rules for local services (DHCP, DNS...) that partially bypass security...
1 affected package
incus
| Package | 22.04 LTS |
|---|---|
| incus | Not in release |
[Unknown description]
1 affected package
libssh
| Package | 22.04 LTS |
|---|---|
| libssh | Needs evaluation |
Not in release
[Unknown description]
1 affected package
gitlab
| Package | 22.04 LTS |
|---|---|
| gitlab | Not in release |