Search CVE reports
1 – 10 of 54620 results
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, recursive remote-to-local SFTP copies...
1 affected package
python-asyncssh
| Package | 24.04 LTS |
|---|---|
| python-asyncssh | Needs evaluation |
unsafe deserialization in hyphenation loading vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: through 2.11. Users are recommended to upgrade to version 2.12, which fixes the issue.
1 affected package
fop
| Package | 24.04 LTS |
|---|---|
| fop | Needs evaluation |
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Prior to versions 2.12.7 and 2.13.1, an attacker can craft a URL that, once visited by an authenticated user (or one that is able to...
1 affected package
icingaweb2
| Package | 24.04 LTS |
|---|---|
| icingaweb2 | Needs evaluation |
Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are...
1 affected package
batik
| Package | 24.04 LTS |
|---|---|
| batik | Needs evaluation |
The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 (inclusive)
1 affected package
bosh
| Package | 24.04 LTS |
|---|---|
| bosh | Needs evaluation |
Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
1 affected package
batik
| Package | 24.04 LTS |
|---|---|
| batik | Needs evaluation |
A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
1 affected package
batik
| Package | 24.04 LTS |
|---|---|
| batik | Needs evaluation |
When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.
11 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7...
| Package | 24.04 LTS |
|---|---|
| python2.7 | Not in release |
| python3.4 | Not in release |
| python3.5 | Not in release |
| python3.6 | Not in release |
| python3.7 | Not in release |
| python3.8 | Not in release |
| python3.9 | Not in release |
| python3.10 | Not in release |
| python3.11 | Not in release |
| python3.12 | Needs evaluation |
| python3.14 | Not in release |
Roundcube Webmail before 1.6.21 and 1.7.x before 1.7.6 contains an IMAP command injection vulnerability that allows attackers to inject commands via CRLF in the _uid parameter when messages_cache is enabled. Attackers can lure...
1 affected package
roundcube
| Package | 24.04 LTS |
|---|---|
| roundcube | Needs evaluation |
Social-auth-core 4.7.0 before 7.0.0 contains a login cross-site request forgery vulnerability in the SAML backend that restores sessions named in the unsigned RelayState parameter. Attackers can deliver their own valid IdP...
1 affected package
social-auth-core
| Package | 24.04 LTS |
|---|---|
| social-auth-core | Needs evaluation |