Search CVE reports
931 – 940 of 37432 results
improper handling of HVM emulation return codes: A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen. A guest with a PCI device assigned that has at least a BAR on the IO port...
1 affected package
xen
| Package | 26.04 LTS |
|---|---|
| xen | Needs evaluation |
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs...
1 affected package
xen
| Package | 26.04 LTS |
|---|---|
| xen | Needs evaluation |
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
4 affected packages
dotnet6, dotnet7, dotnet8, dotnet10
| Package | 26.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet10 | Not affected |
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
4 affected packages
dotnet6, dotnet7, dotnet8, dotnet10
| Package | 26.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet10 | Fixed |
This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.
4 affected packages
dotnet6, dotnet7, dotnet8, dotnet10
| Package | 26.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet10 | Not affected |
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
4 affected packages
dotnet6, dotnet7, dotnet8, dotnet10
| Package | 26.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet10 | Not affected |
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
4 affected packages
dotnet6, dotnet7, dotnet8, dotnet10
| Package | 26.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet10 | Not affected |
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
4 affected packages
dotnet6, dotnet7, dotnet8, dotnet10
| Package | 26.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet10 | Vulnerable |
Creation of a Child SA Pre-Authentication
1 affected package
strongswan
| Package | 26.04 LTS |
|---|---|
| strongswan | Needs evaluation |
Missing Inner EAP Method Authentication Details
1 affected package
strongswan
| Package | 26.04 LTS |
|---|---|
| strongswan | Needs evaluation |