Search CVE reports
171 – 180 of 28980 results
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
2 affected packages
openssh, openssh-ssh1
Package | 24.04 LTS |
---|---|
openssh | Needs evaluation |
openssh-ssh1 | Ignored |
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command...
2 affected packages
openssh, openssh-ssh1
Package | 24.04 LTS |
---|---|
openssh | Needs evaluation |
openssh-ssh1 | Ignored |
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the `!=` comparator. This will result in PHP's call stack...
1 affected package
mediawiki
Package | 24.04 LTS |
---|---|
mediawiki | Needs evaluation |
python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through...
1 affected package
python-socketio
Package | 24.04 LTS |
---|---|
python-socketio | Needs evaluation |
Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitrary code via the q parameter
1 affected package
dokuwiki
Package | 24.04 LTS |
---|---|
dokuwiki | Needs evaluation |
It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2. When a STOR chunk is present, a subsequent FOBJ chunk will be saved in ctx->stored_frame. Stored frames can...
2 affected packages
ffmpeg, libav
Package | 24.04 LTS |
---|---|
ffmpeg | Needs evaluation |
libav | Not in release |
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type (and size), and that if there are four channels, the first four are "B", "G",...
2 affected packages
ffmpeg, libav
Package | 24.04 LTS |
---|---|
ffmpeg | Needs evaluation |
libav | Not in release |
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy loops at [0] and...
2 affected packages
ffmpeg, libav
Package | 24.04 LTS |
---|---|
ffmpeg | Needs evaluation |
libav | Not in release |
When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data. We read rle_raw_size from the input file at [0], we...
2 affected packages
ffmpeg, libav
Package | 24.04 LTS |
---|---|
ffmpeg | Needs evaluation |
libav | Not in release |
When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution (width x height). A buffer of appropriate size is...
2 affected packages
ffmpeg, libav
Package | 24.04 LTS |
---|---|
ffmpeg | Needs evaluation |
libav | Not in release |