Search CVE reports


Toggle filters

81 – 90 of 36755 results

Status is adjusted based on your filters.


CVE-2026-3979

Medium priority

Not in release

(A flaw has been found in quickjs-ng quickjs up to 0.12.1. This affects ...)

1 affected package

quickjs

Package 22.04 LTS
quickjs Not in release
Show less packages

CVE-2026-3950

Medium priority
Vulnerable

A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack...

1 affected package

libheif

Package 22.04 LTS
libheif Vulnerable
Show less packages

CVE-2026-3949

Medium priority
Needs evaluation

A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument...

1 affected package

libheif

Package 22.04 LTS
libheif Needs evaluation
Show less packages

CVE-2026-3904

Medium priority
Not affected

Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on inputs that are concurrently...

2 affected packages

glibc, eglibc

Package 22.04 LTS
glibc Not affected
eglibc Not in release
Show less packages

CVE-2026-3884

Medium priority
Needs evaluation

Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert for each 'target' element. An attacker would need to set an arbitrary...

1 affected package

libjs-spin.js

Package 22.04 LTS
libjs-spin.js Needs evaluation
Show less packages

CVE-2026-31988

Medium priority
Needs evaluation

(yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contai ...)

1 affected package

node-yauzl

Package 22.04 LTS
node-yauzl Needs evaluation
Show less packages

CVE-2026-31958

Medium priority
Needs evaluation

(Tornado is a Python web framework and asynchronous networking library. ...)

1 affected package

python-tornado

Package 22.04 LTS
python-tornado Needs evaluation
Show less packages

CVE-2026-31900

Medium priority
Needs evaluation

(Black is the uncompromising Python code formatter. Black provides a Gi ...)

1 affected package

black

Package 22.04 LTS
black Needs evaluation
Show less packages

CVE-2026-31870

Medium priority
Needs evaluation

(cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTT ...)

1 affected package

cpp-httplib

Package 22.04 LTS
cpp-httplib Needs evaluation
Show less packages

CVE-2026-31853

Medium priority
Needs evaluation

(ImageMagick is free and open-source software used for editing and mani ...)

1 affected package

imagemagick

Package 22.04 LTS
imagemagick Needs evaluation
Show less packages