Lucene search
K

51 matches found

PyPA
PyPA
added 2026/04/09 4:16 p.m.6 views

PYSEC-2026-135

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.8AI score0.00051EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2026/04/09 4:16 p.m.1 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.8AI score0.00051EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/09 3:3 p.m.16 views

CVE-2025-14551 Senstive information disclosure was affecting subiquity

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS0.00051EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.3 views

Canonical Subiquity 安全漏洞

Canonical Subiquity is an Ubuntu server installation program developed by the British company Canonical. Version 24.04.4 of Canonical Subiquity contains a security vulnerability, which stems from improper handling of crash reports and could lead to the exposure of sensitive credentials...

8.1CVSS5.8AI score0.00051EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2011-4039

Malware in sbrugna...

7.5CVSS7.4AI score0.00745EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-35342

Name of the Vulnerable Software and Affected Versions: WhatsApp affected versions not specified Description: Reports indicate potential crash issues in WhatsApp on iOS and macOS. The nature of the issue is currently under investigation. Recommendations: At the moment, there is no information abou...

6.3CVSS6.2AI score0.0007EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2025/05/15 12:0 a.m.6 views

Eclipse Jetty DoS Vulnerability (GHSA-889j-63jv-qhr8) - Windows

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

7.5CVSS7.4AI score0.00576EPSS
Exploits0References2
Wired Threat Level
Wired Threat Level
added 2024/08/08 11:22 p.m.9 views

Computer Crash Reports Are an Untapped Hacker Gold Mine

One hacker solved the CrowdStrike outage mystery with simple crash reports, illustrating the wealth of detail about potential bugs and vulnerabilities those key documents hold...

7.6AI score
Exploits0
Virtuozzo
Virtuozzo
added 2024/06/29 12:0 a.m.20 views

Virtuozzo Hybrid Infrastructure 6.2 (6.2.0-136)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, high availability of the management node, object storage management, networking, and monitoring. Additionally, this release delivers stability improvements and addresses issues found ...

7.2AI score
Exploits0
Ubuntu
Ubuntu
added 2023/04/13 10:18 p.m.70 views

USN-6018-1: Apport vulnerability

Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation vulnerability in apport-cli when viewing crash reports and unprivileged users are allowed to run sudo less. A local attacker on a specially configured system could use this to escalate their privilege...

7.8CVSS7.3AI score0.05047EPSS
Exploits0References1
Ubuntu
Ubuntu
added 2022/05/17 4:38 p.m.411 views

USN-5427-1: Apport vulnerabilities

Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...

7.8CVSS7AI score0.02245EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.18 views

Mozilla Firefox Security Advisory (MFSA2015-68) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS7AI score0.00556EPSS
Exploits0References3
Ubuntu
Ubuntu
added 2021/09/14 1:21 p.m.101 views

USN-5077-2: Apport vulnerabilities

USN-5077-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Maik Münch and Stephen Röttger discovered that Apport incorrectly handled certain information gathering operations. A local...

6.5CVSS6AI score0.00071EPSS
Exploits2
Ubuntu
Ubuntu
added 2021/02/03 1:20 p.m.103 views

USN-4720-2: Apport vulnerabilities

USN-4720-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Itai Greenhut discovered that Apport incorrectly parsed certain files in the /proc filesystem. A local attacker could use this issue to escalate...

8.8CVSS7.6AI score0.00114EPSS
Exploits3
Ubuntu
Ubuntu
added 2020/11/12 1:22 p.m.78 views

USN-4171-6: Apport regression

USN-4171-1 fixed vulnerabilities in Apport. The update caused a regression when handling configuration files. This update fixes the problem, and also introduces further hardening measures. Original advisory details: Kevin Backhouse discovered Apport would read its user-controlled settings file as...

5.7AI score
Exploits0References1
Ubuntu
Ubuntu
added 2020/03/18 2:33 a.m.107 views

USN-4171-5: Apport regression

USN-4171-1 fixed vulnerabilities in Apport. This caused a regression in autopkgtest and python2 compatibility. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Apport would read its user-controlled settings file as the root...

5.7AI score
Exploits0References2
NVD
NVD
added 2020/01/31 5:15 p.m.17 views

CVE-2011-4088

ABRT might allow attackers to obtain sensitive information from crash reports...

7.5CVSS7.2AI score0.00745EPSS
Exploits0References2
Prion
Prion
added 2020/01/31 5:15 p.m.19 views

Information disclosure

ABRT might allow attackers to obtain sensitive information from crash reports...

5CVSS6.3AI score0.00745EPSS
Exploits0References2Affected Software5
Cvelist
Cvelist
added 2020/01/31 4:45 p.m.20 views

CVE-2011-4088

ABRT might allow attackers to obtain sensitive information from crash reports...

7.2AI score0.00745EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2019/11/06 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-4171-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.9AI score0.00192EPSS
Exploits2References3
Rows per page
Query Builder