Search CVE reports
11 – 20 of 36507 results
SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL...
1 affected package
spip
| Package | 22.04 LTS |
|---|---|
| spip | Needs evaluation |
SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in...
1 affected package
spip
| Package | 22.04 LTS |
|---|---|
| spip | Needs evaluation |
Not in release
Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML...
1 affected package
check-mk
| Package | 22.04 LTS |
|---|---|
| check-mk | Not in release |
Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 hash seeded with the...
1 affected package
libapache-sessionx-perl
| Package | 22.04 LTS |
|---|---|
| libapache-sessionx-perl | Needs evaluation |
Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact. The functions `addr2cidr` and `cidrlookup` may return leading zeros in a CIDR string, which may in turn be...
1 affected package
libnet-cidr-perl
| Package | 22.04 LTS |
|---|---|
| libnet-cidr-perl | Needs evaluation |
RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service
1 affected package
wireshark
| Package | 22.04 LTS |
|---|---|
| wireshark | Needs evaluation |
NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service
1 affected package
wireshark
| Package | 22.04 LTS |
|---|---|
| wireshark | Needs evaluation |
USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service
1 affected package
wireshark
| Package | 22.04 LTS |
|---|---|
| wireshark | Needs evaluation |
[Access control bypass due to improper hostname canonicalization]
1 affected package
util-linux
| Package | 22.04 LTS |
|---|---|
| util-linux | Needs evaluation |
Not in release
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.
1 affected package
pgvector
| Package | 22.04 LTS |
|---|---|
| pgvector | Not in release |