Search CVE reports
511 – 520 of 36507 results
Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable...
1 affected package
intel-microcode
| Package | 22.04 LTS |
|---|---|
| intel-microcode | Vulnerable |
An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpedit_dlt_getplugin function at src/tcpedit/plugins/dlt_utils.c.
1 affected package
tcpreplay
| Package | 22.04 LTS |
|---|---|
| tcpreplay | Needs evaluation |
A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference. The attack can only...
1 affected package
lrzip
| Package | 22.04 LTS |
|---|---|
| lrzip | Needs evaluation |
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has...
1 affected package
lrzip
| Package | 22.04 LTS |
|---|---|
| lrzip | Needs evaluation |
A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function get_system_dpi of the file platform/x11/win_main.c. This manipulation causes uncontrolled search path. The attack requires local...
1 affected package
mupdf
| Package | 22.04 LTS |
|---|---|
| mupdf | Ignored |
Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1.*, 2.* before 2.0.7. Users are recommended to upgrade to version 2.0.7 or later, which fixes the issue. Prior to Shiro 2.0.7,...
1 affected package
shiro
| Package | 22.04 LTS |
|---|---|
| shiro | Needs evaluation |
Some fixes available 1 of 3
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet9, dotnet10
| Package | 22.04 LTS |
|---|---|
| dotnet6 | Vulnerable |
| dotnet7 | Ignored |
| dotnet8 | Fixed |
| dotnet9 | Not in release |
| dotnet10 | Not in release |
A TLS 1.3 resumption attempt with an invalid PSK binder value in ClientHello could lead to a denial of service attack via crashing the server.
1 affected package
gnutls28
| Package | 22.04 LTS |
|---|---|
| gnutls28 | Not affected |
go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified....
1 affected package
golang-github-go-git-go-git
| Package | 22.04 LTS |
|---|---|
| golang-github-go-git-go-git | Needs evaluation |
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line...
1 affected package
unity
| Package | 22.04 LTS |
|---|---|
| unity | Needs evaluation |