Search CVE reports
51 – 60 of 35471 results
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user’s system. This vulnerability...
9 affected packages
firefox, mozjs102, mozjs115, mozjs38, mozjs52...
Package | 18.04 LTS |
---|---|
firefox | — |
mozjs102 | — |
mozjs115 | — |
mozjs38 | Needs evaluation |
mozjs52 | Ignored |
mozjs68 | — |
mozjs78 | — |
mozjs91 | — |
thunderbird | — |
Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.
9 affected packages
firefox, mozjs102, mozjs115, mozjs38, mozjs52...
Package | 18.04 LTS |
---|---|
firefox | — |
mozjs102 | — |
mozjs115 | — |
mozjs38 | Needs evaluation |
mozjs52 | Ignored |
mozjs68 | — |
mozjs78 | — |
mozjs91 | — |
thunderbird | — |
Rejected reason: This CVE was accidentally assigned by Mozilla but should be assigned by another CNA. When the correct CVE is available, Mozilla’s advisories will be updated to reflect that identifier.
9 affected packages
firefox, mozjs102, mozjs115, mozjs38, mozjs52...
Package | 18.04 LTS |
---|---|
firefox | — |
mozjs102 | — |
mozjs115 | — |
mozjs38 | Needs evaluation |
mozjs52 | Ignored |
mozjs68 | — |
mozjs78 | — |
mozjs91 | — |
thunderbird | — |
A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption....
1 affected package
binutils
Package | 18.04 LTS |
---|---|
binutils | Needs evaluation |
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the ‘subtag’ struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local...
1 affected package
icu
Package | 18.04 LTS |
---|---|
icu | Vulnerable |
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS
1 affected package
nagvis
Package | 18.04 LTS |
---|---|
nagvis | Needs evaluation |
Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection
1 affected package
nagvis
Package | 18.04 LTS |
---|---|
nagvis | Needs evaluation |
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump_3DGS_MDL7 of the file assimp/code/AssetLib/MDL/MDLMaterialLoader.cpp. The...
1 affected package
assimp
Package | 18.04 LTS |
---|---|
assimp | Needs evaluation |
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads...
1 affected package
assimp
Package | 18.04 LTS |
---|---|
assimp | Needs evaluation |
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDLLoader::validate_header of the...
1 affected package
assimp
Package | 18.04 LTS |
---|---|
assimp | Needs evaluation |