Search CVE reports
491 – 500 of 45567 results
Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local files or fetch URLs by supplying path or href values in message...
1 affected package
node-nodemailer
| Package | 24.04 LTS |
|---|---|
| node-nodemailer | Needs evaluation |
nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or...
1 affected package
node-nodemailer
| Package | 24.04 LTS |
|---|---|
| node-nodemailer | Needs evaluation |
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts...
1 affected package
undertow
| Package | 24.04 LTS |
|---|---|
| undertow | Needs evaluation |
nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedded file attachments. Attackers can send specially crafted emails with...
1 affected package
node-nodemailer
| Package | 24.04 LTS |
|---|---|
| node-nodemailer | Needs evaluation |
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be...
1 affected package
valkey
| Package | 24.04 LTS |
|---|---|
| valkey | Needs evaluation |
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in...
1 affected package
valkey
| Package | 24.04 LTS |
|---|---|
| valkey | Needs evaluation |
Not in release
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data_backend_memory.c of the component History...
1 affected package
open62541
| Package | 24.04 LTS |
|---|---|
| open62541 | Not in release |
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handler. Executing a manipulation can lead to...
1 affected package
kamailio
| Package | 24.04 LTS |
|---|---|
| kamailio | Needs evaluation |
[Unknown description]
1 affected package
incus
| Package | 24.04 LTS |
|---|---|
| incus | Needs evaluation |
[Unknown description]
1 affected package
incus
| Package | 24.04 LTS |
|---|---|
| incus | Needs evaluation |