Search CVE reports
521 – 530 of 35777 results
Not in release
A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to `nft`. This issue...
1 affected package
foomuuri
| Package | 22.04 LTS |
|---|---|
| foomuuri | Not in release |
Not in release
A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31.
1 affected package
foomuuri
| Package | 22.04 LTS |
|---|---|
| foomuuri | Not in release |
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling...
1 affected package
curl
| Package | 22.04 LTS |
|---|---|
| curl | Needs evaluation |
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
1 affected package
libtasn1-6
| Package | 22.04 LTS |
|---|---|
| libtasn1-6 | Fixed |
OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an...
2 affected packages
openldap, lmdb
| Package | 22.04 LTS |
|---|---|
| openldap | Not affected |
| lmdb | Vulnerable |
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib...
4 affected packages
zlib, rsync, zsync, klibc
| Package | 22.04 LTS |
|---|---|
| zlib | Not affected |
| rsync | Not affected |
| zsync | Needs evaluation |
| klibc | Not affected |
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests...
1 affected package
undertow
| Package | 22.04 LTS |
|---|---|
| undertow | Needs evaluation |
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.
1 affected package
curl
| Package | 22.04 LTS |
|---|---|
| curl | Vulnerable |
When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in...
1 affected package
curl
| Package | 22.04 LTS |
|---|---|
| curl | Vulnerable |
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option...
1 affected package
curl
| Package | 22.04 LTS |
|---|---|
| curl | Needs evaluation |