Search CVE reports
1351 – 1360 of 48104 results
QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.
2 affected packages
qt6-base, qtbase-opensource-src
| Package | 24.04 LTS |
|---|---|
| qt6-base | Needs evaluation |
| qtbase-opensource-src | Needs evaluation |
Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG...
1 affected package
ghostscript
| Package | 24.04 LTS |
|---|---|
| ghostscript | Fixed |
Not in release
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.
1 affected package
podman
| Package | 24.04 LTS |
|---|---|
| podman | Not in release |
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG...
1 affected package
gimp
| Package | 24.04 LTS |
|---|---|
| gimp | Needs evaluation |
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; ...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; ...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
1 affected package
chromium-browser
| Package | 24.04 LTS |
|---|---|
| chromium-browser | Not affected |
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the...
1 affected package
chromium-browser
| Package | 24.04 LTS |
|---|---|
| chromium-browser | Not affected |
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
1 affected package
chromium-browser
| Package | 24.04 LTS |
|---|---|
| chromium-browser | Not affected |