Lucene search
+L
UbuntucveMost viewed

79966 matches found

UbuntuCve
UbuntuCve
•added 2024/03/18 11:15 a.m.•49 views

CVE-2024-26633

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: fix NEXTHDRFRAGMENT handling in ip6tnlparsetlvenclim syzbot pointed out 1 that NEXTHDRFRAGMENT handling is broken. Reading fragoff can only be done if we pulled enough bytes to skb-head. Currently we might access...

5.5CVSS6AI score0.0033EPSS
SaveExploits0References27
UbuntuCve
UbuntuCve
•added 2024/03/11 6:15 p.m.•49 views

CVE-2024-26615

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmbdesc access in SMC-D connection dump A crash was found when dumping SMC-D connections. It can be reproduced by following steps: - run nginx/wrk test: smcrun nginx smcrun wrk -t 16 -c 1000 -d -H 'Connection...

5.5CVSS6AI score0.00259EPSS
SaveExploits0References25
UbuntuCve
UbuntuCve
•added 2024/03/06 7:15 a.m.•49 views

CVE-2023-52587

In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the priv-lock while iterating the priv-multicastlist in ipoibmcastjointask opens a window for ipoibmcastdevflush to remove the items while in the middle of iteration. If the mcast is...

5.5CVSS6.2AI score0.00309EPSS
SaveExploits1References26
UbuntuCve
UbuntuCve
•added 2024/03/06 7:15 a.m.•49 views

CVE-2023-52585

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpurasqueryerrorstatushelper Return invalid error code -EINVAL for invalid block id. Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpuras.c:1183 amdgpurasqueryerrorstatushelper...

5.5CVSS5.9AI score0.0028EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
•added 2024/02/21 4:15 a.m.•49 views

CVE-2024-1676

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

9.8CVSS6.1AI score0.18849EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2024/02/09 6:15 p.m.•49 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS6.9AI score0.03024EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/02/01 6:15 p.m.•49 views

CVE-2023-51446

GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP injection. Upgrade to 10.0.12...

8.1CVSS7.1AI score0.0087EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/01/24 12:15 a.m.•49 views

CVE-2024-23638

Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client...

6.5CVSS6.6AI score0.6005EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2024/01/23 12:00 a.m.•49 views

CVE-2024-0751

A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

8.8CVSS7.1AI score0.00633EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2024/01/23 12:00 a.m.•49 views

CVE-2024-23849

In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...

5.5CVSS6.2AI score0.00309EPSS
SaveExploits0References20
UbuntuCve
UbuntuCve
•added 2024/01/16 12:15 p.m.•49 views

CVE-2024-0553

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,...

7.5CVSS6.7AI score0.01614EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2024/01/09 12:00 a.m.•49 views

CVE-2024-0057

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability...

9.8CVSS7.1AI score0.02755EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/12/14 12:00 a.m.•49 views

CVE-2023-49346

Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...

7.8CVSS7AI score0.00303EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/12/12 10:15 p.m.•49 views

CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/12/12 9:15 p.m.•49 views

CVE-2023-50251

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a use tag inside an svg document, an attacker can cause the system to go to an infinite recursion. Depending on the system configuration and attack pattern this could exhaust the...

7.5CVSS7.1AI score0.00878EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2023/12/11 12:00 a.m.•49 views

CVE-2023-6186

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning th...

8.8CVSS7.3AI score0.00772EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/12/11 12:00 a.m.•49 views

CVE-2023-5536

A feature in LXD LP1829071, affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password...

6.4CVSS6.6AI score0.00244EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/12/08 5:15 p.m.•49 views

CVE-2023-6610

An out-of-bounds read vulnerability was found in smb2dumpdetail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information...

7.1CVSS6.5AI score0.0043EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2023/12/04 11:15 p.m.•49 views

CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

8.6CVSS7AI score0.04777EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/11/28 8:15 p.m.•49 views

CVE-2023-30590

The generateKeys API function returned from crypto.createDiffieHellman only generates missing or outdated keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey. However, the...

7.5CVSS6.7AI score0.01462EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/11/22 5:15 p.m.•49 views

CVE-2023-6156

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

8.8CVSS7.5AI score0.00857EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/11/14 9:15 p.m.•49 views

CVE-2023-47627

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTPNOEXTENSIONS is enabled or not using a prebuilt wheel. These bugs have...

7.5CVSS6.8AI score0.00857EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/11/14 12:00 a.m.•49 views

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability...

6.2CVSS6.8AI score0.01085EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/10/25 12:00 a.m.•49 views

CVE-2023-45960

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/10/17 10:15 p.m.•49 views

CVE-2023-22078

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS6.6AI score0.0094EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/10/03 12:00 a.m.•49 views

CVE-2023-4693

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to...

5.3CVSS6.7AI score0.00496EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/09/25 9:15 p.m.•49 views

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

7.8CVSS6.8AI score0.0051EPSS
SaveExploits1References22
UbuntuCve
UbuntuCve
•added 2023/09/13 5:15 p.m.•49 views

CVE-2023-2680

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750...

8.2CVSS7.1AI score0.00236EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2023/08/22 7:16 p.m.•49 views

CVE-2022-47007

An issue was discovered function stabdemanglev3arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...

5.5CVSS6.8AI score0.00431EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2023/08/22 7:16 p.m.•49 views

CVE-2020-35342

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...

7.5CVSS6.6AI score0.00768EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/08/22 7:16 p.m.•49 views

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

5.5CVSS6.4AI score0.00614EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2023/08/02 12:00 a.m.•49 views

CVE-2023-29409

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three...

5.3CVSS6.8AI score0.01601EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2023/07/21 9:15 p.m.•49 views

CVE-2023-3609

A use-after-free vulnerability in the Linux kernel's net/sched: clsu32 component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, u32setparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker...

7.8CVSS6.8AI score0.00454EPSS
SaveExploits1References19
UbuntuCve
UbuntuCve
•added 2023/07/18 12:15 a.m.•49 views

CVE-2023-38430

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read...

9.1CVSS6.8AI score0.01166EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2023/06/30 10:15 p.m.•49 views

CVE-2023-3338

A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system...

6.5CVSS6.7AI score0.08025EPSS
SaveExploits3References9
UbuntuCve
UbuntuCve
•added 2023/06/08 9:15 p.m.•49 views

CVE-2023-29401

The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of...

4.3CVSS6.2AI score0.00486EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
•added 2023/06/07 12:00 a.m.•49 views

CVE-2023-34414

The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays. If a malicious page elicited user clicks in precise locations immediately before navigating to a sit...

3.1CVSS6.7AI score0.00897EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2023/05/31 8:15 p.m.•49 views

CVE-2022-48502

An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfssetea in fs/ntfs3/xattr.c...

7.1CVSS6.8AI score0.00516EPSS
SaveExploits1References11
UbuntuCve
UbuntuCve
•added 2023/05/17 1:15 a.m.•49 views

CVE-2022-42336

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...

3.3CVSS6AI score0.00264EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/05/10 7:15 p.m.•49 views

CVE-2022-36937

HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerous published vulnerabilities and is deprecated. HHVM 4.153.4, 4.168.2, 4.169.2, 4.170.2, 4.171.1, 4.172.1, 4.173.0 replaces TLS1.0 with TLS1.3. Applications...

9.8CVSS7.2AI score0.00527EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/05/10 2:15 p.m.•49 views

CVE-2023-28410

Improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

8.8CVSS6.6AI score0.00262EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/05/09 12:00 a.m.•49 views

CVE-2023-2283

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in thepkiverifydatasignature function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the retu...

6.5CVSS6.6AI score0.01061EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2023/04/01 5:15 a.m.•49 views

CVE-2023-0189

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

8.8CVSS7.1AI score0.00273EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/03/30 5:15 a.m.•49 views

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

5.3CVSS6.8AI score0.01695EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/03/27 9:15 p.m.•49 views

CVE-2023-1079

A flaw was found in the Linux kernel. A use-after-free may be triggered in asuskbdbacklightset when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the workstruct may be scheduled by...

6.8CVSS6.7AI score0.00454EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2023/03/23 8:15 p.m.•49 views

CVE-2023-1289

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial o...

5.5CVSS6.6AI score0.00858EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/03/19 3:15 a.m.•49 views

CVE-2022-48425

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs...

7.8CVSS7AI score0.00249EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2023/03/15 10:15 p.m.•49 views

CVE-2023-28095

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in msgtranslator.c:2628 which might lead to a server crash. This issue was found while fuzzing the function buildresbuffromsipreq but could not be reproduced against a...

7.5CVSS7AI score0.00969EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/03/06 11:15 p.m.•49 views

CVE-2022-3277

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

6.5CVSS6.5AI score0.01065EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/03/06 9:15 p.m.•49 views

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

9.8CVSS7.2AI score0.52299EPSS
SaveExploits6References2
Total number of security vulnerabilities5000