Lucene search
+L
UbuntuMost viewed

11213 matches found

Ubuntu
Ubuntu
•added 2020/12/15 7:03 p.m.•91 views

USN-4670-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain specially crafted image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or other unspecified impact. This issue on...

9.8CVSS7AI score0.03678EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2020/06/09 6:42 p.m.•91 views

USN-4385-1: Intel Microcode vulnerabilities

It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use th...

5.5CVSS6.8AI score0.00564EPSS
SaveExploits0References1
Ubuntu
Ubuntu
•added 2020/04/30 5:52 p.m.•91 views

USN-4342-1: Linux kernel vulnerabilities

Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2020-11884 It was discovered that t...

7.5CVSS7.3AI score0.0415EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2020/04/13 7:46 p.m.•91 views

USN-4328-1: Thunderbird vulnerabilities

It was discovered that Message ID calculation was based on uninitialized data. An attacker could potentially exploit this to obtain sensitive information. CVE-2020-6792 Mutiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted message, an...

9.8CVSS7.6AI score0.07063EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2020/04/08 2:33 p.m.•91 views

USN-4326-1: libiberty vulnerabilities

It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary...

7.8CVSS6.6AI score0.06606EPSS
SaveExploits11
Ubuntu
Ubuntu
•added 2020/03/30 12:00 p.m.•91 views

USN-4308-2: Twisted vulnerabilities

USN-4308-1 fixed several vulnerabilities in Twisted. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: it was discovered that Twisted incorrectly validated or sanitized certain URIs or HTTP methods. A remote attacker could use this issue to inject...

9.8CVSS7.1AI score0.03973EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2020/03/17 12:28 p.m.•91 views

USN-4304-1: Ceph vulnerability

Or Friedman discovered that Ceph incorrectly handled disconnects. A remote authenticated attacker could possibly use this issue to cause Ceph to consume resources, leading to a denial of service...

6.8CVSS6.8AI score0.0242EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2019/11/12 10:04 p.m.•91 views

USN-4182-2: Intel Microcode update

USN-4182-2 provided updates for Intel Microcode. This update provides the corresponding update for Ubuntu 14.04 ESM. Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss...

6.5CVSS7.2AI score0.03133EPSS
SaveExploits0References1
Ubuntu
Ubuntu
•added 2019/11/06 4:05 p.m.•91 views

USN-4176-1: GNU cpio vulnerability

Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege escalation...

7.3CVSS6.6AI score0.00686EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2019/10/21 2:40 p.m.•91 views

USN-4159-1: Exiv2 vulnerability

It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...

6.5CVSS7AI score0.01851EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2019/08/13 5:37 p.m.•91 views

USN-4097-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2019-11041, CVE-2019-11042...

7.1CVSS7AI score0.0442EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2019/08/01 11:59 a.m.•91 views

USN-4084-1: Django vulnerabilities

It was discovered that Django incorrectly handled the Truncator function. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service. CVE-2019-14232 It was discovered that Django incorrectly handled the striptags function. A remote attacke...

9.8CVSS7.5AI score0.47694EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2019/07/01 11:02 a.m.•91 views

USN-4043-1: Django vulnerabilities

It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10 and Ubuntu 19.04. CVE-2019-12308 Gavin Wahl discovered that Django incorrectly handled HTTP detection when...

6.1CVSS7.2AI score0.02402EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2018/09/19 9:49 a.m.•91 views

USN-3766-2: PHP vulnerabilities

USN-3766-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could possibly use this issue to cause PHP to crash, resulting...

7.5CVSS6.6AI score0.08975EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2018/07/30 8:07 p.m.•91 views

USN-3725-2: MySQL vulnerabilities

USN-3725-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to...

6.5CVSS6.9AI score0.03637EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2018/06/11 6:35 p.m.•91 views

USN-3674-1: Linux kernel vulnerabilities

It was discovered that the netfilter subsystem of the Linux kernel did not properly validate ebtables offsets. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2018-1068 It was discovered that a NULL pointer dereference existed in t...

7.8CVSS6.8AI score0.01489EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2018/05/22 3:30 a.m.•91 views

USN-3652-1: Linux kernel vulnerability

Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memor...

5.5CVSS7.1AI score0.60631EPSS
SaveExploits3References1
Ubuntu
Ubuntu
•added 2017/10/26 4:54 p.m.•91 views

USN-3464-1: Wget vulnerabilities

Antti Levomäki, Christian Jalio, and Joonas Pihlaja discovered that Wget incorrectly handled certain HTTP responses. A remote attacker could use this issue to cause Wget to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-13089, CVE-2017-13090 Dawid Golunski...

9.3CVSS7.6AI score0.79855EPSS
SaveExploits9
Ubuntu
Ubuntu
•added 2017/07/31 11:24 p.m.•91 views

USN-3366-2: OpenJDK 8 regression

USN-3366-1 fixed vulnerabilities in OpenJDK 8. Unfortunately, that update introduced a regression that caused some valid JAR files to fail validation. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the JPEGImageReader class in...

7.4AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2017/06/22 12:05 a.m.•91 views

USN-3324-1: Linux kernel vulnerability

It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative privileges...

7.4CVSS7.8AI score0.05186EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2017/05/15 11:50 p.m.•91 views

USN-3275-2: OpenJDK 7 vulnerabilities

USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...

7.7CVSS6.9AI score0.03311EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2017/02/06 6:42 p.m.•91 views

USN-3192-1: Squid vulnerabilities

Saulius Lapinskas discovered that Squid incorrectly handled processing HTTP conditional requests. A remote attacker could possibly use this issue to obtain sensitive information related to other clients' browsing sessions. CVE-2016-10002 Felix Hassert discovered that Squid incorrectly handled...

7.5CVSS6.6AI score0.06766EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2016/10/11 7:26 a.m.•91 views

USN-3099-4: Linux kernel (Qualcomm Snapdragon) vulnerabilities

Vladimír Beneš discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote attacker could use this to cause a stack corruption, leading to a denial of service system crash. CVE-2016-7039 Marco Grassi discovered a...

7.8CVSS6.9AI score0.07613EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2016/06/27 8:41 p.m.•91 views

USN-3017-2: Linux kernel (Raspberry Pi 2) vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

7.8CVSS7.1AI score0.05676EPSS
SaveExploits14
Ubuntu
Ubuntu
•added 2016/06/10 5:46 a.m.•91 views

USN-3003-1: Linux kernel vulnerabilities

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...

10CVSS6.8AI score0.2593EPSS
SaveExploits20
Ubuntu
Ubuntu
•added 2016/05/16 5:31 p.m.•91 views

USN-2978-1: Linux kernel vulnerabilities

David Matlack discovered that the Kernel-based Virtual Machine KVM implementation in the Linux kernel did not properly restrict variable Memory Type Range Registers MTRR in KVM guests. A privileged user in a guest VM could use this to cause a denial of service system crash in the host, expose...

7.8CVSS7.2AI score0.00397EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2016/04/04 6:05 p.m.•91 views

USN-2944-1: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

8.8CVSS7.1AI score0.14621EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2016/03/14 5:20 p.m.•91 views

USN-2932-1: Linux kernel (Vivid HWE) vulnerabilities

Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...

8.4CVSS7.2AI score0.03723EPSS
SaveExploits23
Ubuntu
Ubuntu
•added 2016/03/01 2:38 p.m.•91 views

USN-2914-1: OpenSSL vulnerabilities

Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to recover RSA keys. This flaw is known as CacheBleed. CVE-2016-0702 Adam Langley discovered th...

10CVSS7.8AI score0.32414EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2016/02/02 2:05 a.m.•91 views

USN-2890-1: Linux kernel vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

10CVSS6.4AI score0.09235EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2016/02/02 1:41 a.m.•91 views

USN-2888-1: Linux kernel (Utopic HWE) vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

7CVSS6.3AI score0.0122EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/12/17 7:25 a.m.•91 views

USN-2841-1: Linux kernel vulnerabilities

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 郭永刚 discovered that the pp...

10CVSS6.4AI score0.02501EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/07/27 5:47 p.m.•91 views

USN-2686-1: Apache HTTP Server vulnerabilities

It was discovered that the Apache HTTP Server incorrectly parsed chunk headers. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks. CVE-2015-3183 It was discovered that the Apache HTTP Server incorrectly handled the apsomeauthrequired API. A remote attacker...

5CVSS6.6AI score0.73327EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2015/05/05 10:20 p.m.•91 views

USN-2599-1: Linux kernel (Utopic HWE) vulnerability

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges...

6.2CVSS6.8AI score0.00317EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2015/04/30 8:04 a.m.•91 views

USN-2586-1: Linux kernel (OMAP4) vulnerability

It was discovered that the Linux kernel's IPv6 networking stack has a flaw that allows using route advertisement RA messages to set the 'hoplimit' to values that are too low. An unprivileged attacker on a local network could exploit this flaw to cause a denial of service IPv6 messages dropped...

3.3CVSS7.1AI score0.03031EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2014/07/05 5:54 p.m.•91 views

USN-2271-1: Linux kernel (Saucy HWE) vulnerability

Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x8664 processors. An attacker could exploit this flaw to cause a denial of service System Crash or potential gain administrative privileges...

6.9CVSS6.7AI score0.02324EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2014/04/26 1:51 p.m.•91 views

USN-2179-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine KVM subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. CVE-2014-0049 Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged loc...

7.4CVSS7.2AI score0.00775EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2014/02/18 10:36 p.m.•91 views

USN-2113-1: Linux kernel (Saucy HWE) vulnerabilities

Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload UFI in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service panic. CVE-2013-4563 Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker...

7.2CVSS6.8AI score0.10209EPSS
SaveExploits13
Ubuntu
Ubuntu
•added 2014/02/18 10:12 p.m.•91 views

USN-2109-1: Linux kernel vulnerabilities

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw...

7.2CVSS7.1AI score0.09408EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2014/01/03 10:29 a.m.•91 views

USN-2065-1: Linux kernel (EC2) vulnerabilities

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 A flaw was discovered in the Linux kernel's IP Virtual Server IPVS support. A local user with the CAPNETADMI...

7CVSS6.7AI score0.03209EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2013/03/22 11:36 p.m.•91 views

USN-1778-1: Linux kernel (OMAP4) vulnerabilities

Andrew Jones discovered a flaw with the xeniret function in Linux kernel's Xen virtualizeation. In the 32-bit Xen paravirt platform an unprivileged guest OS user could exploit this flaw to cause a denial of service crash the system or gain guest OS privilege. CVE-2013-0228 A flaw was reported in...

6.5CVSS6.8AI score0.01557EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2013/03/22 11:16 p.m.•91 views

USN-1775-1: Linux kernel vulnerabilities

A flaw was reported in the permission checks done by the Linux kernel for /dev/cpu//msr. A local root user with all capabilities dropped could exploit this flaw to execute code with full root capabilities. CVE-2013-0268 A flaw was discovered in the Linux kernels handling of memory ranges with...

6.2CVSS6.9AI score0.01557EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2013/01/14 10:59 p.m.•91 views

USN-1687-2: NSPR update

USN-1687-1 fixed a vulnerability NSS. This update provides the NSPR needed to use the new NSS. Original advisory details: Two intermediate CA certificates were mis-issued by the TURKTRUST certificate authority. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw...

8.4AI score
SaveExploits0
Ubuntu
Ubuntu
•added 2012/11/30 9:25 a.m.•91 views

USN-1648-1: Linux kernel vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

6.2CVSS6.7AI score0.00959EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2012/03/06 6:38 p.m.•91 views

USN-1388-1: Linux kernel (EC2) vulnerabilities

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in KVM's Programmable Interval Timer PIT...

7.1CVSS6.8AI score0.02701EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2011/11/29 6:16 p.m.•91 views

USN-1285-1: Linux kernel vulnerabilities

Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. CVE-2011-2183 Vasily Averin discovered that the NFS Lock Manager NLM incorrectly handled unlock requests. A...

7.2CVSS7.6AI score0.00541EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2011/10/12 12:25 p.m.•91 views

USN-1228-1: Linux kernel (OMAP4) vulnerabilities

Timo Warns discovered that the EFI GUID partition table was not correctly parsed. A physically local attacker that could insert mountable devices could exploit this to crash the system or possibly gain root privileges. CVE-2011-1776 Dan Rosenberg discovered that the IPv4 diagnostic routines did n...

9.1CVSS7.9AI score0.05044EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2011/09/29 9:54 p.m.•91 views

USN-1222-1: Firefox vulnerabilities

Benjamin Smedberg, Bob Clary, Jesse Ruderman, Bob Clary, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could use these to possibly execute arbitrary...

10CVSS8.6AI score0.05459EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2011/09/14 7:37 p.m.•91 views

USN-1208-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

7.8CVSS6.8AI score0.08793EPSS
SaveExploits24
Ubuntu
Ubuntu
•added 2011/03/03 12:49 a.m.•91 views

USN-1083-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

10CVSS7.3AI score0.17009EPSS
SaveExploits93
Total number of security vulnerabilities5000