Search CVE reports
61 – 70 of 82349 results
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | Not in release | Not in release | Not in release | — | — |
| gnutls28 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created...
1 affected package
mistral
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mistral | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of...
1 affected package
mistral
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mistral | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated...
1 affected package
mistral
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mistral | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP...
2 affected packages
znuny, otrs2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| znuny | Needs evaluation | Needs evaluation | Not in release | — | — |
| otrs2 | Not in release | Not in release | Needs evaluation | Needs evaluation | Needs evaluation |
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as...
2 affected packages
znuny, otrs2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| znuny | Needs evaluation | Needs evaluation | Not in release | — | — |
| otrs2 | Not in release | Not in release | Needs evaluation | Needs evaluation | Needs evaluation |
Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user...
1 affected package
aegisub
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| aegisub | Needs evaluation | Needs evaluation | Not in release | Needs evaluation | — |
5 affected packages
mariadb, mariadb-10.0, mariadb-10.1, mariadb-10.3, mariadb-10.6
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mariadb | Needs evaluation | Needs evaluation | Not in release | Not in release | Not in release |
| mariadb-10.0 | Not in release | Not in release | Not in release | Not in release | Not in release |
| mariadb-10.1 | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| mariadb-10.3 | Not in release | Not in release | Not in release | Needs evaluation | Not in release |
| mariadb-10.6 | Not in release | Not in release | Needs evaluation | Not in release | Not in release |
A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation (os.path.abspath) instead of resolving symbolic...
2 affected packages
ansible, ansible-core
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ansible | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| ansible-core | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | Not in release | Not in release | Not in release | — | — |
| gnutls28 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |