1390 matches found
UBUNTU-CVE-2023-1428
There exists an vulnerability causing an abort to be called in gRPC. The following headers cause gRPC's C++ implementation to abort when called via http2: te: x x != trailers :scheme: x x != http, https grpclbclientstats: x x == anything On top of sending one of those headers, a later header must...
UBUNTU-CVE-2023-3012
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...
UBUNTU-CVE-2023-2662
In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...
UBUNTU-CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
UBUNTU-CVE-2023-32208
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
UBUNTU-CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
UBUNTU-CVE-2023-30406
Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...
UBUNTU-CVE-2023-29578
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::MP4StringProperty function at src/mp4property.cpp...
UBUNTU-CVE-2023-24288
A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...
UBUNTU-CVE-2023-24286
A crafted save file can cause a buffer overrun in the Mosaic puzzle...
UBUNTU-CVE-2023-24284
A crafted save file can cause a buffer overrun in the Guess puzzle...
UBUNTU-CVE-2023-25514
NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution,...
UBUNTU-CVE-2023-2004
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
UBUNTU-CVE-2023-29584
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp...
UBUNTU-CVE-2023-28464
hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...
UBUNTU-CVE-2023-25076
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...
UBUNTU-CVE-2022-44369
NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...
UBUNTU-CVE-2023-28335
The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk...