Lucene search
+L
UbuntucveRecent

76052 matches found

UbuntuCve
UbuntuCve
added 2026/06/22 4:16 p.m.8 views

CVE-2026-49241

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...

8.8CVSS6.1AI score0.00242EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/22 4:16 p.m.7 views

CVE-2026-12549

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading t...

4.8CVSS6.1AI score0.00411EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2026/06/22 2:17 p.m.13 views

CVE-2026-42129

A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information...

7.7CVSS6.1AI score0.00443EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/22 2:17 p.m.9 views

CVE-2026-9029

A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard stored cross-site scripting...

7.3CVSS6AI score0.00251EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.9 views

CVE-2026-54604

Unknown description...

6.1AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.10 views

CVE-2026-53488

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...

9.4CVSS6.1AI score0.00163EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.11 views

CVE-2026-47262

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an...

5.5CVSS6.1AI score0.00265EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.11 views

CVE-2026-6653

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling...

9.8CVSS6.1AI score0.00578EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.10 views

CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

8.2CVSS6.1AI score0.00174EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.12 views

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface CDI annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a...

9.6CVSS6.1AI score0.00347EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/22 12:00 a.m.9 views

CVE-2026-50195

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods ca...

9.9CVSS6.3AI score0.00303EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/21 8:16 p.m.9 views

CVE-2026-12805

A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library ofstd/libsrc/ofxml.cc. Executing a manipulation can lead to heap-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

7.5CVSS6.5AI score0.00468EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 7:16 p.m.9 views

CVE-2026-12804

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is...

5.3CVSS5.7AI score0.0026EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/21 5:16 p.m.10 views

CVE-2026-56412

libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...

5.9CVSS6.1AI score0.00186EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2026/06/21 5:16 p.m.11 views

CVE-2026-56411

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...

6.9CVSS6.1AI score0.00139EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.9 views

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

6.9CVSS6.1AI score0.00139EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.8 views

CVE-2026-56408

libexpat before 2.8.2 has an integer overflow in copyString...

6.9CVSS6.1AI score0.0014EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.10 views

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

6.5CVSS6.1AI score0.00134EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.9 views

CVE-2026-56404

libexpat before 2.8.2 has an integer overflow in addBinding...

6.9CVSS6.1AI score0.0014EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.9 views

CVE-2026-56406

libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...

6.9CVSS6.1AI score0.00139EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.11 views

CVE-2026-56407

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen...

6.9CVSS6.1AI score0.00139EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.9 views

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

6.9CVSS6.1AI score0.0014EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 4:16 p.m.11 views

CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts...

6.9CVSS6.1AI score0.0014EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 2:16 p.m.9 views

CVE-2026-56367

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB PSD v2 RLE decoding path ReadPSDChannelRLE in coders/psd.c that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash...

9.1CVSS6.1AI score0.00418EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 2:16 p.m.11 views

CVE-2026-56378

ImageMagick before 7.1.2-15 and 6.x before 6.9.13-40 contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte...

8.2CVSS6.1AI score0.00389EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/21 8:16 a.m.10 views

CVE-2026-52911

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn-binding slowpath to bound sessions only When the binding SESSIONSETUP sets conn-binding = true, the flag stays set after the call so that the global session lookup in ksmbdsessionlookupall can find the session,...

8.8CVSS5.4AI score0.00663EPSS
SaveExploits0References35
UbuntuCve
UbuntuCve
added 2026/06/20 2:16 a.m.9 views

CVE-2026-9265

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in printattribute UTF8STRING path. printattribute copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declared length via strncpy, leaving no NUL terminator. Downstream callers run strlen on...

9.1CVSS6.1AI score0.00632EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 9:17 p.m.10 views

CVE-2026-49346

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in de265imagegetbuffer libde265/image.cc:128. The overflow wraps the plane allocation size to a sma...

7.1CVSS5.9AI score0.00338EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2026/06/19 9:17 p.m.8 views

CVE-2026-49295

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in decodercontext::processreferencepictureset libde265/decctx.cc:1376. The root cause is a missing aggregate bound check on predicted...

7.1CVSS5.8AI score0.00338EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2026/06/19 9:17 p.m.8 views

CVE-2026-49337

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted sequence of H.265 NAL units causes decodercontext::readsliceNAL libde265/decctx.cc:481 to attach slice headers to a finished picture object that has no active image unit, resulting in...

4.3CVSS5.8AI score0.00327EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/19 8:16 p.m.9 views

CVE-2026-49342

YARD is a documentation generation tool for the Ruby programming language. Prior to version 0.9.44, YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is configured with a document root, a traversal path such as /../yard-cache-secret.html is joine...

5.3CVSS6.1AI score0.00403EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/19 8:16 p.m.18 views

CVE-2026-48715

radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, printff copies up to 2032 bytes from attacker-controlled...

8.8CVSS6.2AI score0.00203EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 7:16 p.m.10 views

CVE-2026-9375

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

7.1AI score0.00304EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 6:16 p.m.10 views

CVE-2026-49271

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using unitoffset + unitsize. Because the addition can wrap, a crafted HEIF file can pass the range check and then construct a vector...

6.5CVSS6.1AI score0.00199EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/19 5:16 p.m.12 views

CVE-2026-56211

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC Scalable Video Coding layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer contex...

7.1CVSS6.5AI score0.00452EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/19 5:16 p.m.8 views

CVE-2026-56210

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...

7.1CVSS6AI score0.00289EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/19 5:16 p.m.11 views

CVE-2026-56209

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel value...

7.1CVSS6.2AI score0.00328EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/19 5:16 p.m.13 views

CVE-2026-56208

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing LAP mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when glaginframes is set to 1 or higher. This results in a 232-byte...

7.6CVSS6.1AI score0.00421EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/19 3:16 p.m.10 views

CVE-2026-52909

In the Linux kernel, the following vulnerability has been resolved: ip6vti: set netnsimmutable on the fallback device. john1988 and Noam Rathaus reported that vti6initnet does not set the netnsimmutable flag on the per-netns fallback tunnel device ip6vti0. Other similar tunnel drivers like...

7.8CVSS6AI score0.0012EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 3:16 p.m.8 views

CVE-2026-52908

In the Linux kernel, the following vulnerability has been resolved: RDMA: During reregmr ensure that REREGACCESS is compatible If IBMRREREGACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr stru...

7.8CVSS6AI score0.00129EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 3:16 p.m.20 views

CVE-2026-52910

In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. 0 The repro sets up a UDP reuseport group with a cBPF prog and replaces it with a new one while another thread is sending a U...

7.8CVSS6.6AI score0.00104EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/06/19 12:16 p.m.11 views

CVE-2026-12706

A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decodemove function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by...

6.5CVSS6.1AI score0.00245EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/19 6:17 a.m.8 views

CVE-2026-56131

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

4.9CVSS6.1AI score0.00182EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 6:17 a.m.8 views

CVE-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers...

6.9CVSS6.2AI score0.00108EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 12:00 a.m.10 views

CVE-2026-55204

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the return value of hpackdhtdefrag when the memory pool is exhausted. An attacker can trigger HPACK dynamic table insertions under memo...

8.7CVSS6.1AI score0.00484EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 12:00 a.m.9 views

CVE-2026-48142

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcharsetmodule module. When content is served or proxied through a location block with both sourcecharset utf-8; and a charset directive for example, charset koi8-r; configured, remote, unauthenticated attackers can send requests ...

6.3CVSS6.1AI score0.00684EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/19 12:00 a.m.12 views

CVE-2026-46862

Vulnerability in the MySQL Router product of Oracle MySQL component: Router: General. Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router. Successful attacks o...

7.5CVSS7AI score0.00463EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/06/19 12:00 a.m.14 views

CVE-2026-55203

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record...

9.1CVSS6.1AI score0.00347EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 12:00 a.m.12 views

CVE-2026-50190

Unknown description...

8.6CVSS6.1AI score0.00258EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/19 12:00 a.m.10 views

CVE-2026-42055

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion to 2 or grpcpass directives are used to proxy HTTP/2 traffic, the ignoreinvalidheaders directive is set to off, and the...

9.2CVSS7.3AI score0.04022EPSS
SaveExploits2References3
Total number of security vulnerabilities76052