Search CVE reports


Toggle filters

1 – 10 of 51042 results

Status is adjusted based on your filters.


CVE-2026-55467

Medium priority
Needs evaluation

2 affected packages

libcupsfilters, cups-filters

Package 20.04 LTS
libcupsfilters Not in release
cups-filters Needs evaluation
Show less packages

CVE-2026-108577

Medium priority

Not in release

A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes...

1 affected package

libmodplug

Package 20.04 LTS
libmodplug Not in release
Show less packages

CVE-2026-108553

High priority

Not in release

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a...

1 affected package

openrefine

Package 20.04 LTS
openrefine Not in release
Show less packages

CVE-2026-108063

Low priority

Not in release

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that...

1 affected package

libhangul

Package 20.04 LTS
libhangul Not in release
Show less packages

CVE-2026-107794

Medium priority

Not in release

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with...

1 affected package

libextutils-typemaps-default-perl

Package 20.04 LTS
libextutils-typemaps-default-perl Not in release
Show less packages

CVE-2026-107570

Medium priority

Not in release

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

1 affected package

mutt

Package 20.04 LTS
mutt Not in release
Show less packages

CVE-2026-107565

Low priority

Not in release

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap...

1 affected package

luksmeta

Package 20.04 LTS
luksmeta Not in release
Show less packages

CVE-2026-107373

Low priority

Not in release

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation...

1 affected package

libextutils-typemaps-default-perl

Package 20.04 LTS
libextutils-typemaps-default-perl Not in release
Show less packages

CVE-2026-102554

Medium priority

Not in release

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing...

1 affected package

guava-libraries

Package 20.04 LTS
guava-libraries Not in release
Show less packages

CVE-2025-55480

Medium priority
Needs evaluation

2 affected packages

cups-filters, libcupsfilters

Package 20.04 LTS
cups-filters Needs evaluation
libcupsfilters Not in release
Show less packages