Search CVE reports
151 – 160 of 49226 results
PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine...
1 affected package
libpodofo
| Package | 20.04 LTS |
|---|---|
| libpodofo | Needs evaluation |
(sh provides Python process launching. Prior to 2.2.4, the _uid option ...)
1 affected package
python-sh
| Package | 20.04 LTS |
|---|---|
| python-sh | Needs evaluation |
MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for SERVICE=WMS&REQUEST=GetMap&FORMAT=application/openlayers reflects an attacker-controlled...
1 affected package
mapserver
| Package | 20.04 LTS |
|---|---|
| mapserver | Needs evaluation |
MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter() treats a filteritem as numeric...
1 affected package
mapserver
| Package | 20.04 LTS |
|---|---|
| mapserver | Needs evaluation |
JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query...
1 affected package
jabref
| Package | 20.04 LTS |
|---|---|
| jabref | Needs evaluation |
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or...
1 affected package
openimageio
| Package | 20.04 LTS |
|---|---|
| openimageio | Needs evaluation |
(libre is a generic library for real-time communications with asynchron ...)
1 affected package
libre
| Package | 20.04 LTS |
|---|---|
| libre | Needs evaluation |
(CakePHP is a rapid development framework for PHP. In versions 4.5.11 a ...)
1 affected package
cakephp
| Package | 20.04 LTS |
|---|---|
| cakephp | Needs evaluation |
(QDomDocument XML parsing is vulnerable to a remotely-triggerable denia ...)
2 affected packages
qt6-base, qtbase-opensource-src
| Package | 20.04 LTS |
|---|---|
| qt6-base | — |
| qtbase-opensource-src | Needs evaluation |
(Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serializ ...)
2 affected packages
qt6-base, qtbase-opensource-src
| Package | 20.04 LTS |
|---|---|
| qt6-base | — |
| qtbase-opensource-src | Needs evaluation |