Search CVE reports
1621 – 1630 of 35604 results
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 24.04 LTS |
|---|---|
| mysql-5.5 | Not in release |
| mysql-5.7 | Not in release |
| mysql-8.0 | Needs evaluation |
| mysql-8.4 | Not in release |
| mariadb | Not affected |
| mariadb-10.0 | Not in release |
| mariadb-10.1 | Not in release |
| mariadb-10.3 | Not in release |
| mariadb-10.6 | Not in release |
| percona-xtradb-cluster-5.6 | Not in release |
| percona-server-5.6 | Not in release |
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u481 and 8u481-b50; Oracle GraalVM Enterprise...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 24.04 LTS |
|---|---|
| mysql-5.5 | Not in release |
| mysql-5.7 | Not in release |
| mysql-8.0 | Needs evaluation |
| mysql-8.4 | Not in release |
| mariadb | Not affected |
| mariadb-10.0 | Not in release |
| mariadb-10.1 | Not in release |
| mariadb-10.3 | Not in release |
| mariadb-10.6 | Not in release |
| percona-xtradb-cluster-5.6 | Not in release |
| percona-server-5.6 | Not in release |
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 24.04 LTS |
|---|---|
| mysql-5.5 | Not in release |
| mysql-5.7 | Not in release |
| mysql-8.0 | Needs evaluation |
| mysql-8.4 | Not in release |
| mariadb | Not affected |
| mariadb-10.0 | Not in release |
| mariadb-10.1 | Not in release |
| mariadb-10.3 | Not in release |
| mariadb-10.6 | Not in release |
| percona-xtradb-cluster-5.6 | Not in release |
| percona-server-5.6 | Not in release |
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Processing a malformed input containing a < character that is not followed by a > character anywhere in the remaining...
1 affected package
golang-github-gomarkdown-markdown
| Package | 24.04 LTS |
|---|---|
| golang-github-gomarkdown-markdown | Needs evaluation |
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
1 affected package
golang-golang-x-image
| Package | 24.04 LTS |
|---|---|
| golang-golang-x-image | Needs evaluation |
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a buffer overflow when decoding Opus audio frames due to insufficient buffer size validation in the Opus codec...
2 affected packages
asterisk, pjproject
| Package | 24.04 LTS |
|---|---|
| asterisk | Needs evaluation |
| pjproject | Not in release |
Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot HTTP-01 challenge provider in lego is vulnerable to arbitrary file write and deletion via path traversal. A malicious ACME server can supply...
1 affected package
golang-github-xenolf-lego
| Package | 24.04 LTS |
|---|---|
| golang-github-xenolf-lego | Needs evaluation |
Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to...
1 affected package
perl
| Package | 24.04 LTS |
|---|---|
| perl | Not affected |
Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned...
1 affected package
civetweb
| Package | 24.04 LTS |
|---|---|
| civetweb | Needs evaluation |