Search CVE reports
1141 – 1150 of 33695 results
A flaw has been found in quickjs-ng quickjs up to 0.12.1. This affects the function js_iterator_concat_return of the file quickjs.c. This manipulation causes use after free. The attack requires local access. The exploit has been...
1 affected package
quickjs
| Package | 24.04 LTS |
|---|---|
| quickjs | Needs evaluation |
Not in release
An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints....
1 affected package
lxd
| Package | 24.04 LTS |
|---|---|
| lxd | Not in release |
Not in release
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11...
1 affected package
consul
| Package | 24.04 LTS |
|---|---|
| consul | Not in release |
yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate() function. The while loop condition checks cursor...
1 affected package
node-yauzl
| Package | 24.04 LTS |
|---|---|
| node-yauzl | Needs evaluation |
A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack...
1 affected package
libheif
| Package | 24.04 LTS |
|---|---|
| libheif | Not affected |
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing...
1 affected package
python-tornado
| Package | 24.04 LTS |
|---|---|
| python-tornado | Needs evaluation |
Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the...
1 affected package
black
| Package | 24.04 LTS |
|---|---|
| black | Needs evaluation |
A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.cc of the component HEIF File Parser. Executing a manipulation of the argument...
1 affected package
libheif
| Package | 24.04 LTS |
|---|---|
| libheif | Not affected |
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.1, when a cpp-httplib client uses the streaming API (httplib::stream::Get, httplib::stream::Post, etc.), the library...
1 affected package
cpp-httplib
| Package | 24.04 LTS |
|---|---|
| cpp-httplib | Needs evaluation |
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
1 affected package
curl
| Package | 24.04 LTS |
|---|---|
| curl | Not affected |