Search CVE reports
211 – 220 of 37865 results
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C. This issue affects gdal:...
1 affected package
gdal
| Package | 20.04 LTS |
|---|---|
| gdal | Needs evaluation |
Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#delete_prefixed` passes blob keys directly to `Dir.glob` without...
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#path_for` does not validate that the resolved filesystem path...
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number helpers accept strings containing...
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Storage's proxy delivery mode, the proxy controller loads the...
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary metadata from the client and persists it on the blob....
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `SafeBuffer#%` does not propagate the `@html_unsafe` flag to the newly...
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. `NumberToDelimitedConverter` uses a lookahead-based regular expression with `gsub!` to insert thousands delimiters....
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTML attribute name in Action View tag helpers, the...
1 affected package
rails
| Package | 20.04 LTS |
|---|---|
| rails | Needs evaluation |
An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the...
1 affected package
gst-plugins-bad1.0
| Package | 20.04 LTS |
|---|---|
| gst-plugins-bad1.0 | Needs evaluation |