Search CVE reports
361 – 370 of 42041 results
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a...
1 affected package
goaccess
| Package | 24.04 LTS |
|---|---|
| goaccess | Needs evaluation |
re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2 validates lastIndex against the UTF-8 byte length of a subject but uses it as a UTF-16 code-unit offset in exec, test, match, replace,...
1 affected package
node-re2
| Package | 24.04 LTS |
|---|---|
| node-re2 | Needs evaluation |
Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.
1 affected package
tika
| Package | 24.04 LTS |
|---|---|
| tika | Needs evaluation |
Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to...
1 affected package
tika
| Package | 24.04 LTS |
|---|---|
| tika | Needs evaluation |
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted...
1 affected package
rails
| Package | 24.04 LTS |
|---|---|
| rails | Needs evaluation |
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not...
1 affected package
python-aiohttp
| Package | 24.04 LTS |
|---|---|
| python-aiohttp | Needs evaluation |
MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c leaves rmem_last, rmem_end, and rmem_owner stale...
1 affected package
ruby-msgpack
| Package | 24.04 LTS |
|---|---|
| ruby-msgpack | Needs evaluation |
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
2 affected packages
sqlite, sqlite3
| Package | 24.04 LTS |
|---|---|
| sqlite | Not in release |
| sqlite3 | Not affected |
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
2 affected packages
sqlite, sqlite3
| Package | 24.04 LTS |
|---|---|
| sqlite | Not in release |
| sqlite3 | Not affected |
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
2 affected packages
sqlite, sqlite3
| Package | 24.04 LTS |
|---|---|
| sqlite | Not in release |
| sqlite3 | Not affected |