Search CVE reports


Toggle filters

21 – 30 of 33401 results

Status is adjusted based on your filters.


CVE-2025-10680

Medium priority
Needs evaluation

OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use

1 affected package

openvpn

Package 22.04 LTS
openvpn Needs evaluation
Show less packages

CVE-2023-53733

Medium priority
Needs evaluation

In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode When u32_replace_hw_knode fails, we need to undo the tcf_bind_filter operation done at u32_set_parms.

147 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 22.04 LTS
linux Needs evaluation
linux-hwe Not in release
linux-hwe-5.4 Not in release
linux-hwe-5.8 Not in release
linux-hwe-5.11 Not in release
linux-hwe-5.13 Not in release
linux-hwe-5.15 Not in release
linux-hwe-5.19 Ignored
linux-hwe-6.2 Ignored
linux-hwe-6.5 Ignored
linux-hwe-6.8 Needs evaluation
linux-hwe-6.11 Not in release
linux-hwe-6.14 Not in release
linux-hwe-edge Not in release
linux-lts-xenial Not in release
linux-kvm Needs evaluation
linux-allwinner-5.19 Ignored
linux-aws Needs evaluation
linux-aws-5.0 Not in release
linux-aws-5.3 Not in release
linux-aws-5.4 Not in release
linux-aws-5.8 Not in release
linux-aws-5.11 Not in release
linux-aws-5.13 Not in release
linux-aws-5.15 Not in release
linux-aws-5.19 Ignored
linux-aws-6.2 Ignored
linux-aws-6.5 Ignored
linux-aws-6.8 Needs evaluation
linux-aws-6.14 Not in release
linux-aws-hwe Not in release
linux-azure Needs evaluation
linux-azure-4.15 Not in release
linux-azure-5.3 Not in release
linux-azure-5.4 Not in release
linux-azure-5.8 Not in release
linux-azure-5.11 Not in release
linux-azure-5.13 Not in release
linux-azure-5.15 Not in release
linux-azure-5.19 Ignored
linux-azure-6.2 Ignored
linux-azure-6.5 Ignored
linux-azure-6.8 Needs evaluation
linux-azure-6.11 Not in release
linux-azure-6.14 Not in release
linux-azure-fde Needs evaluation
linux-azure-fde-5.15 Not in release
linux-azure-fde-5.19 Ignored
linux-azure-fde-6.2 Ignored
linux-azure-fde-6.14 Not in release
linux-azure-nvidia Not in release
linux-azure-nvidia-6.14 Not in release
linux-bluefield Not in release
linux-azure-edge Not in release
linux-fips Needs evaluation
linux-aws-fips Needs evaluation
linux-azure-fips Needs evaluation
linux-gcp-fips Needs evaluation
linux-gcp Needs evaluation
linux-gcp-4.15 Not in release
linux-gcp-5.3 Not in release
linux-gcp-5.4 Not in release
linux-gcp-5.8 Not in release
linux-gcp-5.11 Not in release
linux-gcp-5.13 Not in release
linux-gcp-5.15 Not in release
linux-gcp-5.19 Ignored
linux-gcp-6.2 Ignored
linux-gcp-6.5 Ignored
linux-gcp-6.8 Needs evaluation
linux-gcp-6.11 Not in release
linux-gcp-6.14 Not in release
linux-gke Needs evaluation
linux-gke-4.15 Not in release
linux-gke-5.4 Not in release
linux-gke-5.15 Not in release
linux-gkeop Needs evaluation
linux-gkeop-5.4 Not in release
linux-gkeop-5.15 Not in release
linux-ibm Needs evaluation
linux-ibm-5.4 Not in release
linux-ibm-5.15 Not in release
linux-ibm-6.8 Needs evaluation
linux-intel-5.13 Not in release
linux-intel-iotg Needs evaluation
linux-intel-iotg-5.15 Not in release
linux-iot Not in release
linux-intel-iot-realtime Needs evaluation
linux-lowlatency Needs evaluation
linux-lowlatency-hwe-5.15 Not in release
linux-lowlatency-hwe-5.19 Ignored
linux-lowlatency-hwe-6.2 Ignored
linux-lowlatency-hwe-6.5 Ignored
linux-lowlatency-hwe-6.8 Needs evaluation
linux-lowlatency-hwe-6.11 Not in release
linux-nvidia Needs evaluation
linux-nvidia-6.2 Ignored
linux-nvidia-6.5 Ignored
linux-nvidia-6.8 Needs evaluation
linux-nvidia-6.11 Not in release
linux-nvidia-lowlatency Not in release
linux-nvidia-tegra Needs evaluation
linux-nvidia-tegra-5.15 Not in release
linux-nvidia-tegra-igx Needs evaluation
linux-oracle Needs evaluation
linux-oracle-5.0 Not in release
linux-oracle-5.3 Not in release
linux-oracle-5.4 Not in release
linux-oracle-5.8 Not in release
linux-oracle-5.11 Not in release
linux-oracle-5.13 Not in release
linux-oracle-5.15 Not in release
linux-oracle-6.5 Ignored
linux-oracle-6.8 Needs evaluation
linux-oracle-6.14 Not in release
linux-oem Not in release
linux-oem-5.6 Not in release
linux-oem-5.10 Not in release
linux-oem-5.13 Not in release
linux-oem-5.14 Not in release
linux-oem-5.17 Ignored
linux-oem-6.0 Ignored
linux-oem-6.1 Ignored
linux-oem-6.5 Ignored
linux-oem-6.8 Not in release
linux-oem-6.11 Not in release
linux-oem-6.14 Not in release
linux-raspi Needs evaluation
linux-raspi2 Not in release
linux-raspi-5.4 Not in release
linux-raspi-realtime Not in release
linux-realtime Needs evaluation
linux-realtime-6.8 Needs evaluation
linux-realtime-6.14 Not in release
linux-riscv Ignored
linux-riscv-5.8 Not in release
linux-riscv-5.11 Not in release
linux-riscv-5.15 Not in release
linux-riscv-5.19 Ignored
linux-riscv-6.5 Ignored
linux-riscv-6.8 Needs evaluation
linux-riscv-6.14 Not in release
linux-starfive-5.19 Ignored
linux-starfive-6.2 Ignored
linux-starfive-6.5 Ignored
linux-xilinx Not in release
linux-xilinx-zynqmp Needs evaluation
Show all 147 packages Show less packages

CVE-2021-33622

Medium priority

Not in release

(Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, h ...)

1 affected package

singularity-container

Package 22.04 LTS
singularity-container Not in release
Show less packages

CVE-2025-9158

Medium priority
Needs evaluation

The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sanitization. XSS vulnerability allows an attacker to send a specifically...

1 affected package

request-tracker5

Package 22.04 LTS
request-tracker5 Needs evaluation
Show less packages

CVE-2025-6601

Medium priority

Not in release

[Unknown description]

1 affected package

gitlab

Package 22.04 LTS
gitlab Not in release
Show less packages

CVE-2025-62813

Medium priority
Needs evaluation

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in...

1 affected package

lz4

Package 22.04 LTS
lz4 Needs evaluation
Show less packages

CVE-2025-62708

Medium priority

Not in release

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using...

1 affected package

pypdf

Package 22.04 LTS
pypdf Not in release
Show less packages

CVE-2025-62707

Medium priority

Not in release

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has...

1 affected package

pypdf

Package 22.04 LTS
pypdf Not in release
Show less packages

CVE-2025-62706

Medium priority
Needs evaluation

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF path performs unbounded DEFLATE decompression. A very small ciphertext can expand into tens or hundreds of...

1 affected package

python-authlib

Package 22.04 LTS
python-authlib Needs evaluation
Show less packages

CVE-2025-62641

Medium priority
Needs evaluation

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon...

1 affected package

virtualbox

Package 22.04 LTS
virtualbox Needs evaluation
Show less packages