Search CVE reports
231 – 240 of 46143 results
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or...
1 affected package
node-brace-expansion
| Package | 22.04 LTS |
|---|---|
| node-brace-expansion | Needs evaluation |
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and...
1 affected package
angular.js
| Package | 22.04 LTS |
|---|---|
| angular.js | Needs evaluation |
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting (XSS) vulnerability exists in...
1 affected package
angular.js
| Package | 22.04 LTS |
|---|---|
| angular.js | Needs evaluation |
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters,...
1 affected package
angular.js
| Package | 22.04 LTS |
|---|---|
| angular.js | Needs evaluation |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which...
1 affected package
apache-jena
| Package | 22.04 LTS |
|---|---|
| apache-jena | Needs evaluation |
A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has...
1 affected package
tar
| Package | 22.04 LTS |
|---|---|
| tar | Needs evaluation |
A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked,...
1 affected package
389-ds-base
| Package | 22.04 LTS |
|---|---|
| 389-ds-base | Needs evaluation |
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A...
1 affected package
tar
| Package | 22.04 LTS |
|---|---|
| tar | Needs evaluation |
GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other...
1 affected package
python-git
| Package | 22.04 LTS |
|---|---|
| python-git | Needs evaluation |
A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR...
1 affected package
sssd
| Package | 22.04 LTS |
|---|---|
| sssd | Needs evaluation |