Lucene search
+L
UbuntucveRecent

79966 matches found

UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.3 views

CVE-2026-93750

http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the varyMatches function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intende...

8.2CVSS0.0035EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93494

A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte. This causes the decoder to allocate a ByteBuf a buffer for bytes that is never released, leading to a...

7.5CVSS0.00409EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-93560

A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integer truncation vulnerability could lead to an infinite decode loop, causing a Denial of Service DoS by exhausting memo...

7.5CVSS0.00409EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93658

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with...

7.3CVSS0.00152EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93492

A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimatel...

5.3CVSS0.00301EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-68914

Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not limit nesting depth when Cpanel::JSON::XS is unavailable or MOJONOJSONXS is enabled. An attacker who can supply untrusted JSON to decodejson, fromjson, or j can submit deeply nest...

0.00263EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

6.1CVSS0.002EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-92747

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...

5CVSS0.00151EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-91142

A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...

3.6CVSS0.00092EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.3 views

CVE-2026-84444

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITHUNCOMPRESSEDCODEC is enabled, heifcontextaddimagetile accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image...

7.4CVSS0.00394EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

7.1CVSS0.0022EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.00254EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93395

A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 the minimum valid BSON...

6.9CVSS0.00238EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

6.3CVSS0.00085EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93374

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS0.00354EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

9.6CVSS0.00305EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.3 views

CVE-2026-93383

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00254EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-93382

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00373EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

7.5CVSS0.00245EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93653

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline...

5.5CVSS0.00113EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93589

ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56...

6.3CVSS0.00285EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-93567

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leadi...

7.5CVSS0.00396EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-85999

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selectoriter in src/soupsieve/cssparser.py trims the raw selector with REWSEND, an end-anchored WSC whitespace-and-comment expression used with search, so the regular expression engine retries a greedy...

5.3CVSS0.0035EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-75892

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtpdecodepdpctx function through the PDP context GSN-Address sub-field, leading to memory corruption...

6.5CVSS0.00139EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-63635

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted psd with an invalid colormode bypasses normal validation when oiio:rawcolor or psd:rawdata is enabled...

5.5CVSS0.00151EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.3 views

CVE-2026-54626

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

9.8CVSS0.00533EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-63638

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image can declare unsupported component bit depth 26. cineoninput::open maps it to a 32-bit imagespec,...

8.3CVSS0.00238EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.2 views

CVE-2026-54633

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

6.9CVSS0.00132EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/09/21 12:00 a.m.1 views

CVE-2026-93576

A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return CR and Line Feed LF characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF characters to inject arbitrary SMTP...

7.5CVSS0.00269EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.3 views

CVE-2026-90228

In the Linux kernel, the following vulnerability has been resolved: n...

7.5CVSS0.0067EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.3 views

CVE-2026-90230

In the Linux kernel, the following vulnerability has been resolved: n...

9.1CVSS0.00457EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.3 views

CVE-2026-90231

In the Linux kernel, the following vulnerability has been resolved: a...

8.4CVSS0.00158EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.4 views

CVE-2026-92504

In the Linux kernel, the following vulnerability has been resolved: t...

7CVSS0.00145EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.3 views

CVE-2026-92511

In the Linux kernel, the following vulnerability has been resolved: R...

7.8CVSS0.00125EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.3 views

CVE-2026-90425

In the Linux kernel, the following vulnerability has been resolved: i...

8.8CVSS0.00127EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.4 views

CVE-2026-90427

In the Linux kernel, the following vulnerability has been resolved: i...

7.4CVSS0.00118EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.10 views

CVE-2026-90151

In the Linux kernel, the following vulnerability has been resolved: N...

9.8CVSS0.00739EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.4 views

CVE-2026-93042

In the Linux kernel, the following vulnerability has been resolved: d...

8.8CVSS0.00333EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.12 views

CVE-2026-90107

In the Linux kernel, the following vulnerability has been resolved: n...

0.00211EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.11 views

CVE-2026-90108

In the Linux kernel, the following vulnerability has been resolved: n...

0.00205EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.9 views

CVE-2026-90149

In the Linux kernel, the following vulnerability has been resolved: N...

7.5CVSS0.00576EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.5 views

CVE-2026-92488

In the Linux kernel, the following vulnerability has been resolved: R...

7CVSS0.00121EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.4 views

CVE-2026-90255

In the Linux kernel, the following vulnerability has been resolved: B...

8.8CVSS0.00341EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.4 views

CVE-2026-90260

In the Linux kernel, the following vulnerability has been resolved: b...

7.1CVSS0.00157EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.10 views

CVE-2026-93129

In the Linux kernel, the following vulnerability has been resolved: p...

0.00189EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.12 views

CVE-2026-90110

In the Linux kernel, the following vulnerability has been resolved: i...

9.4CVSS0.00595EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.10 views

CVE-2026-90127

In the Linux kernel, the following vulnerability has been resolved: v...

0.00198EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.11 views

CVE-2026-90116

In the Linux kernel, the following vulnerability has been resolved: A...

0.00198EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.9 views

CVE-2026-90118

In the Linux kernel, the following vulnerability has been resolved: n...

7.8CVSS0.00162EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/18 12:00 a.m.10 views

CVE-2026-90119

In the Linux kernel, the following vulnerability has been resolved: A...

0.002EPSS
SaveExploits0References2
Total number of security vulnerabilities79966