Search CVE reports


Toggle filters

31 – 40 of 54004 results

Status is adjusted based on your filters.


CVE-2026-54880

Medium priority
Needs evaluation

[Unknown description]

1 affected package

ofono

Package 24.04 LTS
ofono Needs evaluation
Show less packages

CVE-2026-54879

Medium priority
Needs evaluation

[Unknown description]

1 affected package

ofono

Package 24.04 LTS
ofono Needs evaluation
Show less packages

CVE-2026-54878

Medium priority
Needs evaluation

[Unknown description]

1 affected package

ofono

Package 24.04 LTS
ofono Needs evaluation
Show less packages

CVE-2026-18376

Medium priority

Not in release

[Unknown description]

1 affected package

koji

Package 24.04 LTS
koji Not in release
Show less packages

CVE-2026-18375

Medium priority
Needs evaluation

[Unknown description]

1 affected package

pagure

Package 24.04 LTS
pagure Needs evaluation
Show less packages

CVE-2026-122054

Medium priority
Needs evaluation

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the...

1 affected package

glibc

Package 24.04 LTS
glibc Needs evaluation
Show less packages

CVE-2026-122032

Medium priority
Needs evaluation

SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back-office access to inject arbitrary SQL by submitting a differing where parameter value in the POST body versus the GET query...

1 affected package

spip

Package 24.04 LTS
spip Needs evaluation
Show less packages

CVE-2026-121971

Medium priority
Needs evaluation

The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or auth_basic) into a request before resolving a relative URL against the base_uri, allowing a...

1 affected package

symfony

Package 24.04 LTS
symfony Needs evaluation
Show less packages

CVE-2026-121964

Medium priority

Not in release

FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment writes BIND_ACK and ALTER_CONTEXT_RESP fragments into a persistent PDU stream after checking only total...

1 affected package

freerdp

Package 24.04 LTS
freerdp Not in release
Show less packages

CVE-2026-121963

Medium priority

Not in release

FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers...

1 affected package

freerdp

Package 24.04 LTS
freerdp Not in release
Show less packages