https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:54:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03100 bdu:2021-03100 https://cve.radiocsirt.org/vuln/bdu:2021-03100 https://cve.radiocsirt.org/vuln/certfr-2021-avi-562 certfr-2021-avi-562 https://cve.radiocsirt.org/vuln/certfr-2021-avi-562 https://cve.radiocsirt.org/vuln/cnvd-2021-37655 cnvd-2021-37655 https://cve.radiocsirt.org/vuln/cnvd-2021-37655 https://cve.radiocsirt.org/vuln/euvd-2026-48121 EUVD-2026-48121 https://cve.radiocsirt.org/vuln/euvd-2026-48121 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36328 <p>A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36328 https://cve.radiocsirt.org/vuln/ghsa-jxwm-333p-5cwx <p>A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-jxwm-333p-5cwx https://cve.radiocsirt.org/vuln/gsd-2020-36328 gsd-2020-36328 https://cve.radiocsirt.org/vuln/gsd-2020-36328 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36328 msrc_CVE-2020-36328 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36328 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1860-1 <p>Security update for libwebp</p> <p>Security update for libwebp</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1860-1 https://cve.radiocsirt.org/vuln/rhba-2021:2854 <p>libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of &#34;quality&#34; parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…</p> <p>libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of &#34;quality&#34; parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…</p> https://cve.radiocsirt.org/vuln/rhba-2021:2854 https://cve.radiocsirt.org/vuln/suse-su-2021:1860-1 <p>Security update for libwebp</p> <p>Security update for libwebp</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1860-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36328 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp</p> <p>A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp</p> <p>A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36328