6445 matches found
UBUNTU-CVE-2022-29914
When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...
CVE-2022-28481
CSV-Safe gem 3.0.0 doesn't filter out special characters which could trigger CSV Injection...
AZL-35155 CVE-2021-4207 affecting package qemu for versions less than 6.2.0-18
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use...
AZL-9645 CVE-2022-1195 affecting package kernel for versions less than 5.15.37.1-2
A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service DOS when the mkiss or sixpack device is detached and reclaim resources early...
UBUNTU-CVE-2021-41945
Encode OSS httpx 0.23.0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copywith...
AZL-9573 CVE-2022-27404 affecting package freetype for versions less than 2.11.1-2
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...
AZL-26759 CVE-2022-27406 affecting package qt5-qtbase for versions less than 5.15.9-1
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FTRequestSize...
AZL-9527 CVE-2022-24675 affecting package golang for versions less than 1.18.3-1
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data...
CVE-2022-27048
A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle MITM attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 ...
AZL-9414 CVE-2022-27451 affecting package mariadb for versions less than 10.6.8-1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/fieldconv.cc...
AZL-9413 CVE-2022-27449 affecting package mariadb for versions less than 10.6.8-1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemfunc.cc:148...
AZL-9409 CVE-2022-27445 affecting package mariadb for versions less than 10.6.8-1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sqlwindow.cc...
AZL-9355 CVE-2022-29156 affecting package kernel for versions less than 5.15.37.1-2
drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease...
ALPINE-CVE-2022-27382
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Itemfield::usedtables/updatedependmapfororder...
CVE-2022-27379
An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
AZL-9693 CVE-2022-27381 affecting package mariadb for versions less than 10.6.8-1
An issue in the component Field::setdefault of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
AZL-9691 CVE-2022-27379 affecting package mariadb for versions less than 10.6.8-1
An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
CVE-2021-41005
A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series versions: Firmware below v1.0.7.0...
CVE-2021-41004
CVE-2021-41004 affects Aruba Instant On 1930 Switch Series with firmware versions below 1.0.7.0. The vulnerability is remote, with network access and low attack complexity, yielding a high impact (availability impact, CVSSv3.1 base score 7.5). Root cause indicated by connected sources as an input...
