Search CVE reports
411 – 420 of 37473 results
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
1 affected package
pcre2
| Package | 26.04 LTS |
|---|---|
| pcre2 | Needs evaluation |
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client...
1 affected package
net-snmp
| Package | 26.04 LTS |
|---|---|
| net-snmp | Needs evaluation |
Not in release
A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding...
1 affected package
mongodb
| Package | 26.04 LTS |
|---|---|
| mongodb | Not in release |
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of...
2 affected packages
glibc, eglibc
| Package | 26.04 LTS |
|---|---|
| glibc | Needs evaluation |
| eglibc | Not in release |
The cstruct package before 6.3.0 for OCaml mishandles indexes.
1 affected package
ocaml-cstruct
| Package | 26.04 LTS |
|---|---|
| ocaml-cstruct | Needs evaluation |
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds...
1 affected package
gst-plugins-good1.0
| Package | 26.04 LTS |
|---|---|
| gst-plugins-good1.0 | Needs evaluation |
cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name and value against character sets that reject the semicolon separator,...
1 affected package
node-cookies
| Package | 26.04 LTS |
|---|---|
| node-cookies | Needs evaluation |
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal...
1 affected package
mongo-c-driver
| Package | 26.04 LTS |
|---|---|
| mongo-c-driver | Needs evaluation |
Not in release
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a...
1 affected package
mongo-cxx-driver
| Package | 26.04 LTS |
|---|---|
| mongo-cxx-driver | Not in release |
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a...
1 affected package
mongo-java-driver
| Package | 26.04 LTS |
|---|---|
| mongo-java-driver | Needs evaluation |