Bugs with TODO items

Show "check" TODOs

BugDescriptionNote
CVE-2014-8739Unrestricted file upload vulnerability in server/php/UploadHandler.php ...check, might be considered only as specific use in WordPress and Joomla?
CVE-2018-18653The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Se ...check, this should be very Ubuntu specific, but it is introduced with the out-of-tree patch from the Lockdown patchset https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/cosmic/commit/?id=03c7de9e956395f3b36f86f89b62780ad9501eef and so possibly affect our kernel as well in some way.
CVE-2019-12107The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd ...check, might affect minidlna
CVE-2019-14493An issue was discovered in OpenCV before 4.1.1. There is a NULL pointe ...check if the old code though is really affected, might been introduced with the refactoring
CVE-2019-14871picolibc might be affected, not yet in the archive
CVE-2019-14872picolibc might be affected, not yet in the archive
CVE-2019-14873picolibc might be affected, not yet in the archive
CVE-2019-14874picolibc might be affected, not yet in the archive
CVE-2019-14875picolibc might be affected, not yet in the archive
CVE-2019-14876picolibc might be affected, not yet in the archive
CVE-2019-14877picolibc might be affected, not yet in the archive
CVE-2019-14878picolibc might be affected, not yet in the archive
CVE-2019-15486django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_ ...check, might actually only have been introduced in upstream v0.9.0 with commits around 9850b675e3d988341c05302df236a560f7985184
CVE-2019-17558Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code ...check, whilst the advisory claims 5.0.0 upwards only the SolrParamResourceLoader might be of issue already earlier?
CVE-2019-9946Cloud Native Computing Foundation (CNCF) CNI (Container Networking Int ...singularity-container seems to embed as well a copy of cni
CVE-2020-5529HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. Html ...check details, might affect jenkins-htmlunit
CVE-2020-7919check older versions than golang-1.11

Search for package or bug name: Reporting problems