Search CVE reports


Toggle filters

141 – 150 of 33378 results

Status is adjusted based on your filters.


CVE-2025-62168

Medium priority
Needs evaluation

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass...

2 affected packages

squid, squid3

Package 22.04 LTS
squid Needs evaluation
squid3 Not in release
Show less packages

CVE-2025-60361

Medium priority

Not in release

radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

1 affected package

radare2

Package 22.04 LTS
radare2 Not in release
Show less packages

CVE-2025-60360

Medium priority

Not in release

radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

1 affected package

radare2

Package 22.04 LTS
radare2 Not in release
Show less packages

CVE-2025-60359

Medium priority

Not in release

radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.

1 affected package

radare2

Package 22.04 LTS
radare2 Not in release
Show less packages

CVE-2025-59438

Medium priority
Needs evaluation

Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.

1 affected package

mbedtls

Package 22.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2025-58148

Medium priority
Needs evaluation

[Unknown description]

1 affected package

xen

Package 22.04 LTS
xen Needs evaluation
Show less packages

CVE-2025-58147

Medium priority
Needs evaluation

[Unknown description]

1 affected package

xen

Package 22.04 LTS
xen Needs evaluation
Show less packages

CVE-2025-57567

Medium priority
Needs evaluation

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user...

1 affected package

pluxml

Package 22.04 LTS
pluxml Needs evaluation
Show less packages

CVE-2025-54764

Medium priority
Needs evaluation

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

1 affected package

mbedtls

Package 22.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2025-49655

Medium priority

Not in release

Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run...

1 affected package

keras

Package 22.04 LTS
keras Not in release
Show less packages