Lucene search
+L
UbuntuMost viewed

11060 matches found

Ubuntu
Ubuntu
•added 2022/12/12 1:28 p.m.•88 views

USN-5773-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Jann Horn discovered that the...

7.8CVSS7.3AI score0.21521EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2022/11/01 4:24 p.m.•88 views

USN-5710-1: OpenSSL vulnerabilities

It was discovered that OpenSSL incorrectly handled certain X.509 Email Addresses. If a certificate authority were tricked into signing a specially-crafted certificate, a remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. The default compiler...

7.5CVSS7.1AI score0.92488EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2022/08/24 4:32 p.m.•88 views

USN-5578-2: Open VM Tools vulnerability

USN-5578-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Open VM Tools incorrectly handled certain requests. An attacker inside the guest could possibly use this issue to gain root...

7.8CVSS7.1AI score0.00552EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/08/22 12:37 p.m.•88 views

USN-5575-1: Libxslt vulnerabilities

Nicolas Grégoire discovered that Libxslt incorrectly handled certain XML. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-5815 Alexey Neyman incorrectly handled certain HTML pages. An attacker...

8.8CVSS7.7AI score0.21458EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/08/04 3:56 p.m.•88 views

USN-5549-1: Django vulnerability

It was discovered that Django incorrectly handled certain FileResponse. An attacker could possibly use this issue to expose sensitive information or gain access over user machine...

8.8CVSS8AI score0.00828EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/08/04 3:24 p.m.•88 views

USN-5546-1: OpenJDK vulnerabilities

Neil Madden discovered that OpenJDK did not properly verify ECDSA signatures. A remote attacker could possibly use this issue to insert, edit or obtain sensitive information. This issue only affected OpenJDK 17 and OpenJDK 18. CVE-2022-21449 It was discovered that OpenJDK incorrectly limited memo...

7.5CVSS7.2AI score0.81039EPSS
SaveExploits8
Ubuntu
Ubuntu
•added 2022/05/30 3:29 p.m.•88 views

USN-5446-2: dpkg vulnerability

USN-5446-1 fixed a vulnerability in dpkg. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially...

9.8CVSS8.3AI score0.03152EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/04/26 2:5 p.m.•88 views

USN-5389-1: Libcroco vulnerabilities

It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. CVE-2017-7960 It was discovered that Libcroco was incorrectly handling invali...

7.1CVSS7AI score0.12996EPSS
SaveExploits7
Ubuntu
Ubuntu
•added 2021/12/09 6:55 p.m.•88 views

USN-5186-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct spoofing attacks, bypass CSP restrictions, or execute arbitrary cod...

8.8CVSS7.5AI score0.0202EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2021/03/08 6:6 p.m.•88 views

USN-4733-2: GNOME Autoar regression

USN-4733-1 fixed a vulnerability in GNOME Autoar. The upstream fix introduced a regression when extracting archives containing directories. This update fixes the problem. Original advisory details: Yiğit Can Yılmaz discovered that GNOME Autoar could extract files outside of the intended directory...

5.8AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2020/08/03 1:7 p.m.•88 views

USN-4445-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code,...

9.8CVSS8.6AI score0.05186EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2020/07/27 4:29 p.m.•88 views

USN-4435-2: ClamAV vulnerabilities

USN-4435-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing ARJ archives. A remote attacker could possibly use this issue to cause...

7.5CVSS7.7AI score0.05063EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2020/06/04 12:57 p.m.•88 views

USN-4381-2: Django vulnerabilities

USN-4381-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to cause a denial of...

6.1CVSS6.7AI score0.0609EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2019/04/02 2:36 p.m.•88 views

USN-3929-1: Firebird vulnerabilities

It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could possibly use this issue with a specially crafted network packet to cause Firebird to crash, resulting in a denial of service. CVE-2014-9323 It was discovered that Firebird incorrectly handled...

8.8CVSS8.2AI score0.03273EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2018/05/23 2:38 p.m.•88 views

USN-3658-1: procps-ng vulnerabilities

It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local attacker could possibly use this issue to escalate privileges. CVE-2018-1122 It was discovered that the procps-ng ps tool incorrectly handled memory. A local user...

9.8CVSS7.3AI score0.09081EPSS
SaveExploits9
Ubuntu
Ubuntu
•added 2018/05/22 3:31 a.m.•88 views

USN-3653-1: Linux kernel vulnerabilities

Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memor...

7.8CVSS7.7AI score0.60631EPSS
SaveExploits3References1
Ubuntu
Ubuntu
•added 2018/05/22 3:30 a.m.•88 views

USN-3652-1: Linux kernel vulnerability

Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memor...

5.5CVSS7.1AI score0.60631EPSS
SaveExploits3References1
Ubuntu
Ubuntu
•added 2017/10/11 12:7 p.m.•88 views

USN-3452-1: Ceph vulnerabilities

It was discovered that Ceph incorrectly handled the handlecommand function. A remote authenticated user could use this issue to cause Ceph to crash, resulting in a denial of service. CVE-2016-5009 Rahul Aggarwal discovered that Ceph incorrectly handled the authenticated-read ACL. A remote attacke...

7.5CVSS6.2AI score0.04396EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2017/06/22 12:5 a.m.•88 views

USN-3324-1: Linux kernel vulnerability

It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative privileges...

7.4CVSS7.8AI score0.05186EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2016/12/05 1:6 p.m.•88 views

USN-3151-3: Linux kernel (Qualcomm Snapdragon) vulnerability

Philip Pettersson discovered a race condition in the afpacket implementation in the Linux kernel. A local unprivileged attacker could use this to cause a denial of service system crash or run arbitrary code with administrative privileges...

7.8CVSS7.5AI score0.11127EPSS
SaveExploits17
Ubuntu
Ubuntu
•added 2016/08/30 4:47 p.m.•88 views

USN-3070-4: Linux kernel (Xenial HWE) vulnerabilities

USN-3070-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. A missing permission check when settings ACLs was discovered in nfsd. A local user cou...

7.8CVSS7.5AI score0.15073EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2016/06/27 9:30 p.m.•88 views

USN-3020-1: Linux kernel (Vivid HWE) vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

7.8CVSS7.1AI score0.05676EPSS
SaveExploits14
Ubuntu
Ubuntu
•added 2016/06/27 9:11 p.m.•88 views

USN-3018-1: Linux kernel vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

7.8CVSS7AI score0.05676EPSS
SaveExploits14
Ubuntu
Ubuntu
•added 2016/04/07 10:0 p.m.•88 views

USN-2917-2: Firefox regressions

USN-2917-1 fixed vulnerabilities in Firefox. This update caused several regressions that could result in search engine settings being lost, the list of search providers appearing empty or the location bar breaking after typing an invalid URL. This update fixes the problem. We apologize for the...

8.2AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2015/11/10 4:1 a.m.•88 views

USN-2806-1: Linux kernel (Vivid HWE) vulnerability

Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...

4.9CVSS6.9AI score0.00566EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2015/09/03 4:38 p.m.•88 views

USN-2730-1: OpenSLP vulnerabilities

Georgi Geshev discovered that OpenSLP incorrectly handled processing certain service requests. A remote attacker could possibly use this issue to cause OpenSLP to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2012-4428 Qinghao Tang...

7.5CVSS7.2AI score0.09573EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/05/05 10:1 p.m.•88 views

USN-2597-1: Linux kernel (Trusty HWE) vulnerability

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges...

6.2CVSS6.8AI score0.00317EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2014/07/16 11:39 p.m.•88 views

USN-2284-1: Linux kernel (OMAP4) vulnerabilities

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x86...

6.9CVSS6.7AI score0.02324EPSS
SaveExploits14
Ubuntu
Ubuntu
•added 2014/03/07 11:56 a.m.•88 views

USN-2138-1: Linux kernel vulnerabilities

Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing atack. CVE-2013-4579 Andrew Honig reported a flaw in the Linux Kernel's kvmvmioctlcreatevcpu function ...

7.2CVSS7AI score0.10209EPSS
SaveExploits8
Ubuntu
Ubuntu
•added 2014/02/18 11:21 p.m.•88 views

USN-2116-1: Linux kernel (OMAP4) vulnerabilities

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 A flaw in the handling of memory regions of the kernel virtual machine KVM subsystem was discovered. ...

4.7CVSS6.8AI score0.00654EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2014/02/18 10:19 p.m.•88 views

USN-2110-1: Linux kernel (OMAP4) vulnerabilities

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw...

7.2CVSS7.1AI score0.09408EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2014/01/03 10:39 a.m.•88 views

USN-2066-1: Linux kernel vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged...

6.9CVSS7.1AI score0.0381EPSS
SaveExploits9
Ubuntu
Ubuntu
•added 2013/02/21 1:56 p.m.•88 views

USN-1733-1: Ruby vulnerabilities

Jean-Philippe Aumasson discovered that Ruby incorrectly generated predictable hash values. An attacker could use this issue to generate hash collisions and cause a denial of service. CVE-2012-5371 Evgeny Ermakov discovered that documentation generated by rdoc is vulnerable to a cross-site scripti...

7.5CVSS7AI score0.13911EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2013/01/18 3:48 a.m.•88 views

USN-1698-1: Linux kernel (OMAP4) vulnerabilities

A flaw was discovered in the Linux kernel's handling of script execution when module loading is enabled. A local attacker could exploit this flaw to cause a leak of kernel stack contents. CVE-2012-4530 Florian Weimer discovered that hypervkvpd, which is distributed in the Linux kernel, was not...

4.9CVSS5.7AI score0.00882EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2012/10/12 6:37 p.m.•88 views

USN-1611-1: Thunderbird vulnerabilities

Henrik Skupin, Jesse Ruderman, Christian Holler, Soroush Dalili and others discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the...

10CVSS8.9AI score0.42609EPSS
SaveExploits8References2
Ubuntu
Ubuntu
•added 2012/06/12 9:12 p.m.•88 views

USN-1470-1: Linux kernel (Natty backport) vulnerabilities

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation. A remote NFS server attacker could exploit this flaw to cause a denial of service. CVE-2011-4131 A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit...

7.2CVSS6.7AI score0.00775EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2012/05/31 9:38 p.m.•88 views

USN-1457-1: Linux kernel vulnerabilities

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation. A remote NFS server attacker could exploit this flaw to cause a denial of service. CVE-2011-4131 A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit...

7.2CVSS6.7AI score0.00775EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2012/03/06 6:38 p.m.•88 views

USN-1388-1: Linux kernel (EC2) vulnerabilities

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in KVM's Programmable Interval Timer PIT...

7.1CVSS6.8AI score0.02678EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2011/10/25 1:6 p.m.•88 views

USN-1244-1: Linux kernel (OMAP4) vulnerabilities

Dan Rosenberg discovered that the Linux kernel X.25 implementation incorrectly parsed facilities. A remote attacker could exploit this to crash the kernel, leading to a denial of service. CVE-2010-3873 Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being...

7.2CVSS6.9AI score0.03739EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2011/10/19 8:18 p.m.•88 views

USN-1232-2: X.Org X server regression

USN-1232-1 fixed vulnerabilities in the X.Org X server. A regression was found on Ubuntu 10.04 LTS that affected GLX support. This update temporarily disables the fix for CVE-2010-4818 that introduced the regression. We apologize for the inconvenience. Original advisory details: It was discovered...

5.8AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2011/09/28 10:50 p.m.•88 views

USN-1213-1: Thunderbird vulnerabilities

Benjamin Smedberg, Bob Clary, Jesse Ruderman, and Josh Aas discovered multiple memory vulnerabilities in the Gecko rendering engine. An attacker could use these to possibly execute arbitrary code with the privileges of the user invoking Thunderbird. CVE-2011-2995, CVE-2011-2996 Boris Zbarsky...

10CVSS8.9AI score0.045EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2011/09/14 7:37 p.m.•88 views

USN-1208-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

7.8CVSS6.8AI score0.08793EPSS
SaveExploits24
Ubuntu
Ubuntu
•added 2011/03/03 12:49 a.m.•88 views

USN-1083-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

10CVSS7.3AI score0.17009EPSS
SaveExploits93
Ubuntu
Ubuntu
•added 2010/06/29 9:22 p.m.•88 views

USN-930-2: apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update

USN-930-1 fixed vulnerabilities in Firefox and Xulrunner. This update provides updated packages for use with Firefox 3.6 and Xulrunner 1.9.2 on Ubuntu 8.04 LTS. Original advisory details: If was discovered that Firefox could be made to access freed memory. If a user were tricked into viewing a...

9.1AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2008/11/17 8:38 p.m.•88 views

USN-671-1: MySQL vulnerabilities

It was discovered that MySQL could be made to overwrite existing table files in the data directory. An authenticated user could use the DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege checks. This update alters table creation behaviour by disallowing the use of the MySQL...

4.6CVSS7.1AI score0.06465EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2006/07/28 9:7 a.m.•88 views

USN-328-1: Apache vulnerability

Mark Dowd discovered an off-by-one buffer overflow in the modrewrite module's ldap scheme handling. On systems which activate "RewriteEngine on", a remote attacker could exploit certain rewrite rules to crash Apache, or potentially even execute arbitrary code this has not been verified...

7.6CVSS8AI score0.96436EPSS
SaveExploits21
Ubuntu
Ubuntu
•added 2004/10/23 2:11 a.m.•88 views

USN-2-1: xpdf vulnerabilities

Chris Evans discovered several integer overflow vulnerabilities in xpdf, a viewer for PDF files. The Common UNIX Printing System CUPS also uses the same code to print PDF files. In either case, these vulnerabilities could be exploited by an attacker by providing a specially crafted PDF file which...

10CVSS5.9AI score0.06209EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2025/04/10 8:38 p.m.•87 views

USN-7432-1: libsoup vulnerabilities

It was discovered that libsoup could be made to read out of bounds. An attacker could possibly use this issue to cause applications using libsoup to crash, resulting in a denial of service. CVE-2025-2784, CVE-2025-32050, CVE-2025-32052, CVE-2025-32053 It was discovered that libsoup could be made ...

7CVSS6.9AI score0.00779EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2025/04/03 5:36 p.m.•87 views

USN-7414-1: XZ Utils vulnerability

Harri K. Koskinen discovered that XZ Utils incorrectly handled the threaded xz decoder. If a user or automated system were tricked into processing an xz file, a remote attacker could use this issue to cause XZ Utils to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.7CVSS7.2AI score0.00647EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2025/04/01 3:25 p.m.•87 views

USN-7261-2: Vim vulnerability

USN-7261-1 fixed vulnerabilities in Vim. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of...

5.5CVSS5.5AI score0.00276EPSS
SaveExploits0
Total number of security vulnerabilities5000