Search CVE reports


Toggle filters

2311 – 2320 of 37984 results

Status is adjusted based on your filters.


CVE-2025-14911

Medium priority

Not in release

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

1 affected package

mongodb

Package 22.04 LTS
mongodb Not in release
Show less packages

CVE-2026-22259

Medium priority
Needs evaluation

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing...

1 affected package

suricata

Package 22.04 LTS
suricata Needs evaluation
Show less packages

CVE-2026-22258

Medium priority
Needs evaluation

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, crafted DCERPC traffic can cause Suricata to expand a buffer w/o limits, leading to memory exhaustion and the process getting killed....

1 affected package

suricata

Package 22.04 LTS
suricata Needs evaluation
Show less packages

CVE-2026-24869

Medium priority
Not affected

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2.

2 affected packages

firefox, thunderbird

Package 22.04 LTS
firefox Not affected
thunderbird Not affected
Show less packages

CVE-2026-24868

Medium priority
Not affected

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2.

2 affected packages

firefox, thunderbird

Package 22.04 LTS
firefox Not affected
thunderbird Not affected
Show less packages

CVE-2025-68670

Medium priority
Needs evaluation

xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the...

1 affected package

xrdp

Package 22.04 LTS
xrdp Needs evaluation
Show less packages

CVE-2025-28164

Medium priority
Not affected

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.

5 affected packages

libpng, firefox, thunderbird, chromium-browser, libpng1.6

Package 22.04 LTS
libpng Not in release
firefox Not affected
thunderbird Not affected
chromium-browser Not affected
libpng1.6 Not affected
Show less packages

CVE-2025-28162

Medium priority
Not affected

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high...

5 affected packages

libpng, firefox, thunderbird, chromium-browser, libpng1.6

Package 22.04 LTS
libpng Not in release
firefox Not affected
thunderbird Not affected
chromium-browser Not affected
libpng1.6 Not affected
Show less packages

CVE-2026-1489

Medium priority
Fixed

A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker...

1 affected package

glib2.0

Package 22.04 LTS
glib2.0 Fixed
Show less packages

CVE-2026-1485

Medium priority
Fixed

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This...

1 affected package

glib2.0

Package 22.04 LTS
glib2.0 Fixed
Show less packages