Search CVE reports


Toggle filters

1 – 10 of 40097 results

Status is adjusted based on your filters.


CVE-2026-42326

Medium priority
Needs evaluation

[Unknown description]

1 affected package

imagemagick

Package 20.04 LTS
imagemagick Needs evaluation
Show less packages

CVE-2026-41076

Medium priority
Needs evaluation

[Unknown description]

2 affected packages

request-tracker4, request-tracker5

Package 20.04 LTS
request-tracker4 Needs evaluation
request-tracker5
Show less packages

CVE-2026-41075

Medium priority
Needs evaluation

[Unknown description]

2 affected packages

request-tracker4, request-tracker5

Package 20.04 LTS
request-tracker4 Needs evaluation
request-tracker5
Show less packages

CVE-2026-41073

Medium priority
Needs evaluation

[Unknown description]

2 affected packages

request-tracker4, request-tracker5

Package 20.04 LTS
request-tracker4 Needs evaluation
request-tracker5
Show less packages

CVE-2026-24425

Medium priority
Needs evaluation

Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attackers with template rendering capabilities to pass arbitrary PHP callables to sort, filter,...

1 affected package

php-twig

Package 20.04 LTS
php-twig Needs evaluation
Show less packages

CVE-2026-22554

Medium priority
Needs evaluation

MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability

1 affected package

libmediainfo

Package 20.04 LTS
libmediainfo Needs evaluation
Show less packages

CVE-2026-41054

Medium priority
Needs evaluation

In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a...

1 affected package

haveged

Package 20.04 LTS
haveged Needs evaluation
Show less packages

CVE-2026-47784

Medium priority
Needs evaluation

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

1 affected package

memcached

Package 20.04 LTS
memcached Needs evaluation
Show less packages

CVE-2026-8975

Medium priority
Ignored

Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code....

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 20.04 LTS
firefox
thunderbird
mozjs38
mozjs52 Ignored
mozjs68 Ignored
mozjs78
mozjs91
mozjs102
mozjs115
Show all 9 packages Show less packages

CVE-2026-8974

Medium priority
Ignored

Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code....

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 20.04 LTS
firefox
thunderbird
mozjs38
mozjs52 Ignored
mozjs68 Ignored
mozjs78
mozjs91
mozjs102
mozjs115
Show all 9 packages Show less packages