Search CVE reports
1591 – 1600 of 58108 results
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[] parameter. An authenticated user with operator...
1 affected package
ocsinventory-server
| Package | 16.04 LTS |
|---|---|
| ocsinventory-server | Needs evaluation |
SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper...
1 affected package
ocsinventory-server
| Package | 16.04 LTS |
|---|---|
| ocsinventory-server | Needs evaluation |
Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The application validates files solely based on the name provided by the client, without properly checking their...
1 affected package
ocsinventory-server
| Package | 16.04 LTS |
|---|---|
| ocsinventory-server | Needs evaluation |
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial...
1 affected package
gfs2-utils
| Package | 16.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive...
1 affected package
gfs2-utils
| Package | 16.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to...
1 affected package
gfs2-utils
| Package | 16.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to...
1 affected package
gfs2-utils
| Package | 16.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with an exponentially-derived size from the untrusted on-disk di_depth field without bounds validation. A crafted...
1 affected package
gfs2-utils
| Package | 16.04 LTS |
|---|---|
| gfs2-utils | Needs evaluation |
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit...
1 affected package
util-linux
| Package | 16.04 LTS |
|---|---|
| util-linux | Needs evaluation |
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established...
10 affected packages
golang-1.17, golang-1.20, golang-1.21, golang-1.22, golang-1.23...
| Package | 16.04 LTS |
|---|---|
| golang-1.17 | — |
| golang-1.20 | — |
| golang-1.21 | — |
| golang-1.22 | — |
| golang-1.23 | — |
| golang-1.24 | — |
| golang-1.25 | — |
| golang-1.26 | — |
| golang-1.27 | — |
| golang-defaults | Needs evaluation |