Lucene search
+L
UbuntucveRecent

72412 matches found

UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•9 views

CVE-2026-23032

In the Linux kernel, the following vulnerability has been resolved: nullblk: fix kmemleak by releasing references to fault configfs items When CONFIGBLKDEVNULLBLKFAULTINJECTION is enabled, the null-blk driver sets up fault injection support by creating the timeoutinject, requeueinject, and...

5.6AI score0.00206EPSS
SaveExploits0References20
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•8 views

CVE-2026-23018

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•7 views

CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

5.5CVSS5.8AI score0.00161EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•12 views

CVE-2026-23037

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: allow partial RX URB allocation to succeed When es58xallocrxurbs fails to allocate the requested number of URBs but succeeds in allocating some, it returns an error code. This causes es58xopen to return early,...

5.6AI score0.00217EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•7 views

CVE-2026-23020

In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference in vortexprobe1 pdev can be null and freering: can be called in 1297 with a null pdev...

5.5CVSS5.8AI score0.00115EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•12 views

CVE-2026-23033

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dmapool resource leak in error paths The dmapool created by dmapoolcreate is not destroyed when dmaasyncdeviceregister or ofdmacontrollerregister fails, causing a resource leak in the probe error paths. A...

5.8AI score0.00202EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•4 views

CVE-2025-71186

In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route allocation Make sure to drop the reference taken when looking up the DMA mux platform device during route allocation. Note that holding a reference to a device does not prevent i...

5.5CVSS5.8AI score0.00187EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•6 views

CVE-2026-23023

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpfvportrel Free vport-rxptypelkup in idpfvportrel to avoid leaking memory during a reset. Reported by kmemleak: unreferenced object 0xff450acac838a000 size 4096: comm "kworker/u258:5", pid 7732, jiffies...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•5 views

CVE-2026-23024

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entries that are added and removed as ethtool creates and deletes flow steering rules. Module removal with active entries causes memory leak as th...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•7 views

CVE-2026-23034

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix fence reference leak on queue teardown v2 The user mode queue keeps a pointer to the most recent fence in userq-lastfence. This pointer holds an extra dmafence reference. When the queue is destroyed, we free...

5.7AI score0.00177EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•7 views

CVE-2026-23038

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4ffallocdeviceidnode In nfs4ffallocdeviceidnode, if the allocation for dsversions fails, the function jumps to the outscratch label without freeing the already allocated dsaddrs list, leading...

5.9AI score0.00245EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•8 views

CVE-2025-71189

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the reference taken to the DMA master OF node also on late route allocation failures...

5.5CVSS5.8AI score0.00183EPSS
SaveExploits0References20
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•10 views

CVE-2026-23027

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvmdevice leak in kvmpchpicdestroy In kvmioctlcreatedevice, kvmdevice has allocated memory, kvmdevice-destroy seems to be supposed to free its kvmdevice struct, but kvmpchpicdestroy is not currently doing this...

5.7AI score0.00194EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•7 views

CVE-2025-71182

In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939sessionactivate fail if device is no longer registered syzbot is still reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 even after commit 93a27b5891b8 "can: j1939: add missing...

5.5CVSS5.7AI score0.00156EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•8 views

CVE-2026-23025

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: prevent pcp corruption with SMP=n The kernel test robot has reported: BUG: spinlock trylock failure on UP on CPU0, kcompactd0/28 lock: 0xffff888807e35ef0, .magic: dead4ead, .owner: kcompactd0/28, .ownercpu: 0 CPU: 0...

7.8CVSS6.5AI score0.00184EPSS
SaveExploits0References20
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•7 views

CVE-2026-23026

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in gpiperipheralconfig Fix a memory leak in gpiperipheralconfig where the original memory pointed to by gchan-config could be lost if krealloc fails. The issue occurs when: 1. gchan-config...

5.5CVSS5.8AI score0.00183EPSS
SaveExploits0References33
UbuntuCve
UbuntuCve
•added 2026/01/31 12:16 p.m.•5 views

CVE-2025-71180

In the Linux kernel, the following vulnerability has been resolved: counter: interrupt-cnt: Drop IRQFNOTHREAD flag An IRQ handler can either be IRQFNOTHREAD or acquire spinlockt, as CONFIGPROVERAWLOCKNESTING warns: ============================= BUG: Invalid wait context 6.18.0-rc1+git... 1...

5.5CVSS6.2AI score0.00149EPSS
SaveExploits0References32
UbuntuCve
UbuntuCve
•added 2026/01/30 11:16 p.m.•8 views

CVE-2020-37038

Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulating input in the FSymbols search field. Attackers can paste a large payload of 5000 repeated characters into the search field to trigger an application crash...

7.5CVSS5.9AI score0.00373EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/01/30 11:16 p.m.•10 views

CVE-2020-37040

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project...

8.4CVSS6.4AI score0.00188EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•3 views

CVE-2025-36184

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 could allow an instance owner to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level...

7.2CVSS5.9AI score0.00471EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•6 views

CVE-2025-36442

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns...

7.5CVSS5.4AI score0.00387EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•7 views

CVE-2025-36098

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper allocation of resources...

6.5CVSS5.4AI score0.00347EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•6 views

CVE-2025-36001

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML that performs uncontrolled recursion...

6.5CVSS5.6AI score0.00347EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•7 views

CVE-2025-36427

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a user to cause a denial of service due to insufficient validation of special elements in data query logic...

6.5CVSS5.5AI score0.00328EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•5 views

CVE-2025-36423

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 - 12.1.3 could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS5.4AI score0.00242EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•4 views

CVE-2025-36070

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as a trap may occur when selecting from certain types of tables...

7.5CVSS5.4AI score0.0035EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•7 views

CVE-2025-2668

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 is vulnerable to a denial of service as the server may crash when an authenticated user creates a specially crafted query...

6.5CVSS5.4AI score0.00347EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•7 views

CVE-2025-36366

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a user to cause a denial of service by executing a query that invokes the JSONObject scalar function, which may trigger an unhandled exception leading to abnormal server termination...

6.5CVSS5.5AI score0.00355EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•6 views

CVE-2025-36365

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific configuration of cataloged remote storage aliases could allow an authenticated user to execute unauthorized commands due to an authorization bypass vulnerability using a...

7.5CVSS5.5AI score0.00261EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•8 views

CVE-2025-36009

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an authenticated user to cause a denial of service due to excessive use of a global variable...

6.5CVSS5.5AI score0.00339EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•8 views

CVE-2025-36123

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service when copying large table containing XML data due to improper allocation of system resources...

6.2CVSS5.4AI score0.00134EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•10 views

CVE-2025-36407

IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations...

6.5CVSS5.4AI score0.00275EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•9 views

CVE-2025-36353

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.2CVSS5.4AI score0.00152EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•9 views

CVE-2025-36428

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•6 views

CVE-2025-36387

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 - 11.5.9 could allow an authenticated user to cause a denial of service when given specially crafted query...

6.5CVSS5.4AI score0.00328EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 10:15 p.m.•7 views

CVE-2025-36424

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS5.5AI score0.00328EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 9:15 p.m.•5 views

CVE-2025-24293

Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allow for the circumvention of the safe defaults which enables...

9.2CVSS6.2AI score0.02388EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/01/30 8:16 p.m.•5 views

CVE-2025-11175

Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extensio...

8.8CVSS5.9AI score0.00424EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/01/30 7:16 p.m.•7 views

CVE-2025-62348

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process...

7.8CVSS6.4AI score0.00179EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 7:16 p.m.•6 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/01/30 7:16 p.m.•9 views

CVE-2025-62349

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues...

7.5CVSS6AI score0.00407EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/01/30 6:15 p.m.•8 views

CVE-2025-15497

Insufficient epoch key slot processing in OpenVPN 2.7alpha1 through 2.7rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...

7CVSS5.9AI score0.00323EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/01/30 5:16 p.m.•6 views

CVE-2020-36966

Dolibarr 11.0.3 contains a persistent cross-site scripting vulnerability in LDAP synchronization settings that allows attackers to inject malicious scripts through multiple parameters. Attackers can exploit the host, slave, and port parameters in /dolibarr/admin/ldap.php to execute arbitrary...

6.4CVSS5.9AI score0.00244EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/01/30 5:16 p.m.•5 views

CVE-2020-37014

Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...

6.4CVSS6AI score0.00311EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/01/30 4:16 p.m.•8 views

CVE-2026-25128

fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 5.0.9 through 5.3.3, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-rang...

7.5CVSS5.9AI score0.00559EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/01/30 3:16 p.m.•9 views

CVE-2024-4027

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service DoS attack...

7.5CVSS5.9AI score0.00575EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/01/30 12:0 a.m.•6 views

CVE-2026-25210

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...

7.8CVSS7AI score0.00193EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/01/29 10:15 p.m.•6 views

CVE-2026-25061

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past...

7.5CVSS5.9AI score0.00517EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/01/29 10:15 p.m.•8 views

CVE-2026-25063

gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary code execution when a user triggers Bash tab completion in a project containing a malicious Gradle build file. Th...

8.3CVSS6.3AI score0.00689EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/01/29 8:16 p.m.•9 views

CVE-2026-25068

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...

4.6CVSS7.2AI score0.00191EPSS
SaveExploits0References4
Total number of security vulnerabilities72412