Search CVE reports


Toggle filters

31 – 40 of 48142 results

Status is adjusted based on your filters.


CVE-2026-33983

Medium priority
Needs evaluation

[Progressive Codec Quant BYTE Underflow - UB + CPU DoS]

3 affected packages

freerdp, freerdp2, freerdp3

Package 16.04 LTS
freerdp Needs evaluation
freerdp2
freerdp3
Show less packages

CVE-2026-33982

Medium priority
Needs evaluation

[Persistent Cache Allocator Mismatch - Heap OOB Read]

3 affected packages

freerdp, freerdp2, freerdp3

Package 16.04 LTS
freerdp Needs evaluation
freerdp2
freerdp3
Show less packages

CVE-2026-33977

Medium priority
Needs evaluation

[DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)]

3 affected packages

freerdp, freerdp2, freerdp3

Package 16.04 LTS
freerdp Needs evaluation
freerdp2
freerdp3
Show less packages

CVE-2026-33952

Medium priority
Needs evaluation

[DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks]

3 affected packages

freerdp, freerdp2, freerdp3

Package 16.04 LTS
freerdp Needs evaluation
freerdp2
freerdp3
Show less packages

CVE-2026-33945

High priority
Needs evaluation

Incus is a system container and virtual machine manager. Incus instances have an option to provide credentials to systemd in the guest. For containers, this is handled through a shared directory. Prior to version 6.23.0, an...

2 affected packages

incus, lxd

Package 16.04 LTS
incus
lxd Needs evaluation
Show less packages

CVE-2026-33936

Medium priority
Needs evaluation

The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH...

1 affected package

python-ecdsa

Package 16.04 LTS
python-ecdsa Needs evaluation
Show less packages

CVE-2026-33898

Medium priority
Needs evaluation

Incus is a system container and virtual machine manager. Prior to version 6.23.0, the web server spawned by `incus webui` incorrectly validates the authentication token such that an invalid value will be accepted. `incus webui`...

2 affected packages

incus, lxd

Package 16.04 LTS
incus
lxd Needs evaluation
Show less packages

CVE-2026-33897

Medium priority
Needs evaluation

Incus is a system container and virtual machine manager. Prior to version 6.23.0, instance template files can be used to cause arbitrary read or writes as root on the host server. Incus allows for pongo2 templates within instances...

2 affected packages

incus, lxd

Package 16.04 LTS
incus
lxd Needs evaluation
Show less packages

CVE-2026-33871

Medium priority
Needs evaluation

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of...

1 affected package

netty

Package 16.04 LTS
netty Needs evaluation
Show less packages

CVE-2026-33870

Medium priority
Needs evaluation

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling...

1 affected package

netty

Package 16.04 LTS
netty Needs evaluation
Show less packages