Search CVE reports


Toggle filters

171 – 180 of 28980 results

Status is adjusted based on your filters.


CVE-2025-61985

Low priority
Needs evaluation

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

2 affected packages

openssh, openssh-ssh1

Package 24.04 LTS
openssh Needs evaluation
openssh-ssh1 Ignored
Show less packages

CVE-2025-61984

Low priority
Needs evaluation

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command...

2 affected packages

openssh, openssh-ssh1

Package 24.04 LTS
openssh Needs evaluation
openssh-ssh1 Ignored
Show less packages

CVE-2025-61766

Medium priority
Needs evaluation

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the `!=` comparator. This will result in PHP's call stack...

1 affected package

mediawiki

Package 24.04 LTS
mediawiki Needs evaluation
Show less packages

CVE-2025-61765

Medium priority
Needs evaluation

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through...

1 affected package

python-socketio

Package 24.04 LTS
python-socketio Needs evaluation
Show less packages

CVE-2025-61224

Medium priority
Needs evaluation

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitrary code via the q parameter

1 affected package

dokuwiki

Package 24.04 LTS
dokuwiki Needs evaluation
Show less packages

CVE-2025-59734

Medium priority
Needs evaluation

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2. When a STOR chunk is present, a subsequent FOBJ chunk will be saved in ctx->stored_frame. Stored frames can...

2 affected packages

ffmpeg, libav

Package 24.04 LTS
ffmpeg Needs evaluation
libav Not in release
Show less packages

CVE-2025-59733

Medium priority
Needs evaluation

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type (and size), and that if there are four channels, the first four are "B", "G",...

2 affected packages

ffmpeg, libav

Package 24.04 LTS
ffmpeg Needs evaluation
libav Not in release
Show less packages

CVE-2025-59732

Medium priority
Needs evaluation

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy loops at [0] and...

2 affected packages

ffmpeg, libav

Package 24.04 LTS
ffmpeg Needs evaluation
libav Not in release
Show less packages

CVE-2025-59731

Medium priority
Needs evaluation

When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data. We read rle_raw_size from the input file at [0], we...

2 affected packages

ffmpeg, libav

Package 24.04 LTS
ffmpeg Needs evaluation
libav Not in release
Show less packages

CVE-2025-59730

Medium priority
Needs evaluation

When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution (width x height). A buffer of appropriate size is...

2 affected packages

ffmpeg, libav

Package 24.04 LTS
ffmpeg Needs evaluation
libav Not in release
Show less packages