Search CVE reports
811 – 820 of 47438 results
Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 -...
1 affected package
libspring-java
| Package | 20.04 LTS |
|---|---|
| libspring-java | Needs evaluation |
UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring...
1 affected package
libspring-java
| Package | 20.04 LTS |
|---|---|
| libspring-java | Needs evaluation |
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include_subtree to the...
1 affected package
keystone
| Package | 20.04 LTS |
|---|---|
| keystone | Needs evaluation |
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that...
1 affected package
zfs-linux
| Package | 20.04 LTS |
|---|---|
| zfs-linux | Fixed |
[Use a user message to trigger form autofill]
1 affected package
epiphany-browser
| Package | 20.04 LTS |
|---|---|
| epiphany-browser | Needs evaluation |
SHIFT_JISX0213 converter hang in shift_jisx0213.c
2 affected packages
glibc, eglibc
| Package | 20.04 LTS |
|---|---|
| glibc | Needs evaluation |
| eglibc | — |
backtracking leading to exponential load time
1 affected package
libyaml-perl
| Package | 20.04 LTS |
|---|---|
| libyaml-perl | Needs evaluation |
[Out-of-bounds stack array access in tdelete]
2 affected packages
glibc, eglibc
| Package | 20.04 LTS |
|---|---|
| glibc | Needs evaluation |
| eglibc | — |
Buffer overflow in strfmon right-justification padding
2 affected packages
glibc, eglibc
| Package | 20.04 LTS |
|---|---|
| glibc | Not affected |
| eglibc | — |
A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log,...
2 affected packages
ansible, ansible-core
| Package | 20.04 LTS |
|---|---|
| ansible | Needs evaluation |
| ansible-core | — |