Search CVE reports
1131 – 1140 of 45918 results
UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring...
1 affected package
libspring-java
| Package | 24.04 LTS |
|---|---|
| libspring-java | Needs evaluation |
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include_subtree to the...
1 affected package
keystone
| Package | 24.04 LTS |
|---|---|
| keystone | Needs evaluation |
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that...
1 affected package
zfs-linux
| Package | 24.04 LTS |
|---|---|
| zfs-linux | Fixed |
[Use a user message to trigger form autofill]
1 affected package
epiphany-browser
| Package | 24.04 LTS |
|---|---|
| epiphany-browser | Needs evaluation |
SHIFT_JISX0213 converter hang in shift_jisx0213.c
2 affected packages
glibc, eglibc
| Package | 24.04 LTS |
|---|---|
| glibc | Fixed |
| eglibc | Not in release |
[Unknown description]
1 affected package
libyaml-perl
| Package | 24.04 LTS |
|---|---|
| libyaml-perl | Needs evaluation |
[Out-of-bounds stack array access in tdelete]
2 affected packages
glibc, eglibc
| Package | 24.04 LTS |
|---|---|
| glibc | Fixed |
| eglibc | Not in release |
Buffer overflow in strfmon right-justification padding
2 affected packages
glibc, eglibc
| Package | 24.04 LTS |
|---|---|
| glibc | Fixed |
| eglibc | Not in release |
A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log,...
2 affected packages
ansible, ansible-core
| Package | 24.04 LTS |
|---|---|
| ansible | Needs evaluation |
| ansible-core | Needs evaluation |
The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project (including database passwords, API...
1 affected package
netty
| Package | 24.04 LTS |
|---|---|
| netty | Needs evaluation |