Search CVE reports
11 – 20 of 31781 results
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, an unauthenticated SQL injection in the /get/<package>/<version> endpoint allows remote attackers to execute arbitrary SQL via a...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in apidoc queue insertion can allow query manipulation if an attacker can influence the inserted...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN (...) list. This issue has been patched in...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verification hashes may allow attackers to guess verification tokens and potentially verify election account requests...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in category deletion can allow an attacker with access to the category manager workflow to inject SQL...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched...
1 affected package
php-pear
| Package | 24.04 LTS |
|---|---|
| php-pear | Needs evaluation |
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage...
1 affected package
fastdds
| Package | 24.04 LTS |
|---|---|
| fastdds | Needs evaluation |