Search CVE reports
581 – 590 of 41351 results
pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with large /Size values. An attacker who uses this vulnerability can craft a PDF...
2 affected packages
pypdf, pypdf2
| Package | 18.04 LTS |
|---|---|
| pypdf | — |
| pypdf2 | Needs evaluation |
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18, 20.3.16, 21.0.7, and 21.1.0-rc.0, a cross-site scripting (XSS)...
1 affected package
angular.js
| Package | 18.04 LTS |
|---|---|
| angular.js | Needs evaluation |
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
1 affected package
fluidsynth
| Package | 18.04 LTS |
|---|---|
| fluidsynth | Needs evaluation |
A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active....
1 affected package
wget2
| Package | 18.04 LTS |
|---|---|
| wget2 | Needs evaluation |
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to...
1 affected package
wget2
| Package | 18.04 LTS |
|---|---|
| wget2 | Needs evaluation |
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' (as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 ) has leading zeros and is...
1 affected package
node-elliptic
| Package | 18.04 LTS |
|---|---|
| node-elliptic | Needs evaluation |
Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safe_join function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are...
1 affected package
python-werkzeug
| Package | 18.04 LTS |
|---|---|
| python-werkzeug | Not affected |
Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON. A regression introduced in Preact 10.26.5 caused this protection to be...
1 affected package
node-preact
| Package | 18.04 LTS |
|---|---|
| node-preact | Needs evaluation |
An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ?...
1 affected package
smb4k
| Package | 18.04 LTS |
|---|---|
| smb4k | Needs evaluation |
An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper
1 affected package
smb4k
| Package | 18.04 LTS |
|---|---|
| smb4k | Needs evaluation |