Search CVE reports
121 – 130 of 31991 results
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.
1 affected package
roundcube
| Package | 24.04 LTS |
|---|---|
| roundcube | Needs evaluation |
[NULL dereference via C_DeriveKey with specific NULL parameters]
1 affected package
p11-kit
| Package | 24.04 LTS |
|---|---|
| p11-kit | Not affected |
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed...
1 affected package
mapnik
| Package | 24.04 LTS |
|---|---|
| mapnik | Needs evaluation |
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the...
1 affected package
vim
| Package | 24.04 LTS |
|---|---|
| vim | Needs evaluation |
Not in release
A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes...
1 affected package
llama.cpp
| Package | 24.04 LTS |
|---|---|
| llama.cpp | Not in release |
calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom...
1 affected package
calibre
| Package | 24.04 LTS |
|---|---|
| calibre | Needs evaluation |
calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion,...
1 affected package
calibre
| Package | 24.04 LTS |
|---|---|
| calibre | Needs evaluation |
calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this...
1 affected package
calibre
| Package | 24.04 LTS |
|---|---|
| calibre | Needs evaluation |
time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The...
1 affected package
rust-time
| Package | 24.04 LTS |
|---|---|
| rust-time | Needs evaluation |
MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering. The function accepts a caller-owned fz_pixmap pointer...
1 affected package
mupdf
| Package | 24.04 LTS |
|---|---|
| mupdf | Needs evaluation |