Search CVE reports
921 – 930 of 42041 results
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the /*# sourceMappingURL=PATH */ comment...
1 affected package
node-postcss
| Package | 24.04 LTS |
|---|---|
| node-postcss | Needs evaluation |
Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the...
1 affected package
erlang
| Package | 24.04 LTS |
|---|---|
| erlang | Needs evaluation |
Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending...
1 affected package
erlang
| Package | 24.04 LTS |
|---|---|
| erlang | Needs evaluation |
The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_chain/5, the received chain is passed...
1 affected package
erlang
| Package | 24.04 LTS |
|---|---|
| erlang | Needs evaluation |
The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tls_handshake:hello/5...
1 affected package
erlang
| Package | 24.04 LTS |
|---|---|
| erlang | Needs evaluation |
Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer...
1 affected package
erlang
| Package | 24.04 LTS |
|---|---|
| erlang | Needs evaluation |
Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files...
1 affected package
erlang
| Package | 24.04 LTS |
|---|---|
| erlang | Needs evaluation |
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
2 affected packages
sqlite, sqlite3
| Package | 24.04 LTS |
|---|---|
| sqlite | Not in release |
| sqlite3 | Not affected |
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
2 affected packages
sqlite, sqlite3
| Package | 24.04 LTS |
|---|---|
| sqlite | Not in release |
| sqlite3 | Not affected |
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
2 affected packages
sqlite, sqlite3
| Package | 24.04 LTS |
|---|---|
| sqlite | Not in release |
| sqlite3 | Not affected |