Search CVE reports
1 – 10 of 54374 results
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)
2 affected packages
gnutls26, gnutls28
| Package | 22.04 LTS |
|---|---|
| gnutls26 | Not in release |
| gnutls28 | Needs evaluation |
The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or...
1 affected package
golang-github-moby-sys
| Package | 22.04 LTS |
|---|---|
| golang-github-moby-sys | Needs evaluation |
An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of users accessing that page. This issue affects OTRS: * ...
2 affected packages
znuny, otrs2
| Package | 22.04 LTS |
|---|---|
| znuny | Not in release |
| otrs2 | Needs evaluation |
An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's...
2 affected packages
znuny, otrs2
| Package | 22.04 LTS |
|---|---|
| znuny | Not in release |
| otrs2 | Needs evaluation |
Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of...
1 affected package
dcmtk
| Package | 22.04 LTS |
|---|---|
| dcmtk | Needs evaluation |
Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a...
1 affected package
dcmtk
| Package | 22.04 LTS |
|---|---|
| dcmtk | Needs evaluation |
A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted...
1 affected package
dcmtk
| Package | 22.04 LTS |
|---|---|
| dcmtk | Needs evaluation |
Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process...
1 affected package
dcmtk
| Package | 22.04 LTS |
|---|---|
| dcmtk | Needs evaluation |
Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a...
1 affected package
dcmtk
| Package | 22.04 LTS |
|---|---|
| dcmtk | Needs evaluation |
Not in release
(Russh is a Rust SSH client & server library. Prior to version 0.60.1, ...)
1 affected package
rust-russh
| Package | 22.04 LTS |
|---|---|
| rust-russh | Not in release |