67696 matches found
UBUNTU-CVE-2026-78221
Unknown description...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8714-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8714-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Ubuntu 18.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8715-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8715-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in...
UBUNTU-CVE-2026-84451
Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read...
UBUNTU-CVE-2026-78043
Unknown description...
UBUNTU-CVE-2026-81738
Unknown description...
UBUNTU-CVE-2026-71197
Unknown description...
UBUNTU-CVE-2026-71196
Unknown description...
UBUNTU-CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...
UBUNTU-CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...
Linux Distros Unpatched Vulnerability : CVE-2026-65109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix...
Linux Distros Unpatched Vulnerability : CVE-2026-65165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix various issues around job steps and node count discrepancies CVE-2026-65165 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-65138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a...
Linux Distros Unpatched Vulnerability : CVE-2026-80231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting...
Linux Distros Unpatched Vulnerability : CVE-2026-65140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...
UBUNTU-CVE-2026-56855
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
UBUNTU-CVE-2026-53683
resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary...
UBUNTU-CVE-2026-14957
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...