Search CVE reports
1611 – 1620 of 60314 results
An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of `path.join` API.
1 affected package
nodejs
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| nodejs | Not affected | Not affected | Not affected | Not affected |
The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who can control the strings to be hashed can generate...
1 affected package
nodejs
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| nodejs | Not affected | Not affected | Not affected | Not affected |
qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.
1 affected package
qbittorrent
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| qbittorrent | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf_dash_download_init_segment of the file src/media_tools/dash_client.c. The manipulation of the argument...
1 affected package
gpac
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| gpac | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import functions can lead to a WebAssembly guest inducing a panic in the host (embedder)....
1 affected package
rust-wasmtime
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| rust-wasmtime | Needs evaluation | Not in release | — | — |
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3,...
1 affected package
node-form-data
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| node-form-data | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different...
1 affected package
grafana
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| grafana | Not in release | Not in release | — | — |
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal...
1 affected package
grafana
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| grafana | Not in release | Not in release | — | — |
In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points out that epoll is decrementing the ep refcount and then doing a ...
144 affected packages
linux-hwe-5.11, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.13...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| linux-hwe-5.11 | Not in release | Not in release | Ignored | Not in release |
| linux-hwe | Not in release | Not in release | Not in release | Ignored |
| linux-hwe-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-hwe-5.8 | Not in release | Not in release | Ignored | Not in release |
| linux-hwe-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-hwe-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-hwe-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-hwe-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-hwe-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-hwe-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-hwe-6.11 | Ignored | Not in release | Not in release | Not in release |
| linux-hwe-edge | Not in release | Not in release | Not in release | Ignored |
| linux | Vulnerable | Vulnerable | Ignored | Ignored |
| linux-lts-xenial | Not in release | Not in release | Not in release | Not in release |
| linux-kvm | Not in release | Vulnerable | Ignored | Ignored |
| linux-allwinner-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-aws-5.0 | Not in release | Not in release | Not in release | Ignored |
| linux-aws-5.3 | Not in release | Not in release | Not in release | Ignored |
| linux-aws-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-aws-5.8 | Not in release | Not in release | Ignored | Not in release |
| linux-aws-5.11 | Not in release | Not in release | Ignored | Not in release |
| linux-aws-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-aws-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-aws-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-aws-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-aws-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-aws-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-aws-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-aws-hwe | Not in release | Not in release | Not in release | Not in release |
| linux-azure | Vulnerable | Vulnerable | Ignored | Ignored |
| linux-azure-4.15 | Not in release | Not in release | Not in release | Ignored |
| linux-azure-5.3 | Not in release | Not in release | Not in release | Ignored |
| linux-azure-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-azure-5.8 | Not in release | Not in release | Ignored | Not in release |
| linux-azure-5.11 | Not in release | Not in release | Ignored | Not in release |
| linux-azure-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-azure-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-azure-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-azure-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-azure-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-azure-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-azure-6.11 | Ignored | Not in release | Not in release | Not in release |
| linux-azure-fde | Not in release | Vulnerable | Ignored | Not in release |
| linux-azure-fde-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-azure-fde-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-azure-fde-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-azure-nvidia | Vulnerable | Not in release | Not in release | Not in release |
| linux-bluefield | Not in release | Not in release | Ignored | Not in release |
| linux-azure-edge | Not in release | Not in release | Not in release | Ignored |
| linux-fips | Not in release | Vulnerable | Vulnerable | Vulnerable |
| linux-aws-fips | Not in release | Vulnerable | Vulnerable | Vulnerable |
| linux-azure-fips | Not in release | Vulnerable | Vulnerable | Vulnerable |
| linux-gcp-fips | Not in release | Vulnerable | Vulnerable | Vulnerable |
| linux-gcp | Vulnerable | Vulnerable | Ignored | Ignored |
| linux-gcp-4.15 | Not in release | Not in release | Not in release | Ignored |
| linux-gcp-5.3 | Not in release | Not in release | Not in release | Ignored |
| linux-gcp-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-gcp-5.8 | Not in release | Not in release | Ignored | Not in release |
| linux-gcp-5.11 | Not in release | Not in release | Ignored | Not in release |
| linux-gcp-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-gcp-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-gcp-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-gcp-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-gcp-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-gcp-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-gcp-6.11 | Ignored | Not in release | Not in release | Not in release |
| linux-gke | Vulnerable | Vulnerable | Ignored | Not in release |
| linux-gke-4.15 | Not in release | Not in release | Not in release | Ignored |
| linux-gke-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-gke-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-gkeop | Vulnerable | Vulnerable | Ignored | Not in release |
| linux-gkeop-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-gkeop-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-ibm | Vulnerable | Vulnerable | Ignored | Not in release |
| linux-ibm-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-ibm-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-ibm-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-intel-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-intel-iotg | Not in release | Vulnerable | Not in release | Not in release |
| linux-intel-iotg-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-iot | Not in release | Not in release | Ignored | Not in release |
| linux-intel-iot-realtime | Not in release | Vulnerable | Not in release | Not in release |
| linux-lowlatency | Vulnerable | Vulnerable | Not in release | Not in release |
| linux-lowlatency-hwe-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-lowlatency-hwe-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-lowlatency-hwe-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-lowlatency-hwe-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-lowlatency-hwe-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-lowlatency-hwe-6.11 | Ignored | Not in release | Not in release | Not in release |
| linux-nvidia | Vulnerable | Vulnerable | Not in release | Not in release |
| linux-nvidia-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-nvidia-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-nvidia-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-nvidia-lowlatency | Vulnerable | Not in release | Not in release | Not in release |
| linux-nvidia-tegra | Vulnerable | Vulnerable | Not in release | Not in release |
| linux-nvidia-tegra-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-nvidia-tegra-igx | Not in release | Vulnerable | Not in release | Not in release |
| linux-oracle-5.0 | Not in release | Not in release | Not in release | Ignored |
| linux-oracle-5.3 | Not in release | Not in release | Not in release | Ignored |
| linux-oracle-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-oracle-5.8 | Not in release | Not in release | Ignored | Not in release |
| linux-oracle-5.11 | Not in release | Not in release | Ignored | Not in release |
| linux-oracle-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-oracle-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-oracle-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-oracle-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-oem | Not in release | Not in release | Not in release | Ignored |
| linux-oem-5.6 | Not in release | Not in release | Ignored | Not in release |
| linux-oem-5.10 | Not in release | Not in release | Ignored | Not in release |
| linux-oem-5.13 | Not in release | Not in release | Ignored | Not in release |
| linux-oem-5.14 | Not in release | Not in release | Ignored | Not in release |
| linux-oem-5.17 | Not in release | Ignored | Not in release | Not in release |
| linux-oem-6.0 | Not in release | Ignored | Not in release | Not in release |
| linux-oem-6.1 | Not in release | Ignored | Not in release | Not in release |
| linux-oem-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-oem-6.8 | Ignored | Not in release | Not in release | Not in release |
| linux-oem-6.11 | Ignored | Not in release | Not in release | Not in release |
| linux-oem-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-raspi2 | Not in release | Not in release | Ignored | Ignored |
| linux-raspi-5.4 | Not in release | Not in release | Not in release | Ignored |
| linux-raspi-realtime | Vulnerable | Not in release | Not in release | Not in release |
| linux-riscv | Ignored | Ignored | Ignored | Not in release |
| linux-riscv-5.8 | Not in release | Not in release | Ignored | Not in release |
| linux-riscv-5.11 | Not in release | Not in release | Ignored | Not in release |
| linux-riscv-5.15 | Not in release | Not in release | Ignored | Not in release |
| linux-riscv-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-riscv-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-riscv-6.8 | Not in release | Vulnerable | Not in release | Not in release |
| linux-riscv-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-starfive-5.19 | Not in release | Ignored | Not in release | Not in release |
| linux-starfive-6.2 | Not in release | Ignored | Not in release | Not in release |
| linux-starfive-6.5 | Not in release | Ignored | Not in release | Not in release |
| linux-xilinx-zynqmp | Not in release | Vulnerable | Ignored | Not in release |
| linux-aws | Vulnerable | Vulnerable | Ignored | Ignored |
| linux-oracle | Vulnerable | Vulnerable | Ignored | Ignored |
| linux-raspi | Vulnerable | Vulnerable | Ignored | Not in release |
| linux-realtime | Vulnerable | Vulnerable | Not in release | Not in release |
| linux-intel | Ignored | Not in release | Not in release | Not in release |
| linux-gcp-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-hwe-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-oracle-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-nvidia-6.11 | Vulnerable | Not in release | Not in release | Not in release |
| linux-realtime-6.14 | Vulnerable | Not in release | Not in release | Not in release |
| linux-realtime-6.8 | Not in release | Vulnerable | Not in release | Not in release |
[NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c)]
2 affected packages
ffmpeg, libav
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| ffmpeg | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libav | Not in release | Not in release | — | — |