affectedPackage.OS:"ubuntu" AND affectedPackage.OSVersion:21.10

Daily Hot! Security news Exploit updates Blogs review Bugbounty Linux vulnerabilities Scanners plugins updates CVE Feed Security Tools Firefox vulnerabilities CVSS High Score Windows Vulnerabilities Popular in social networks Wild exploited log4j news

ubuntucve

CVE-2022-21455

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....

2022-07-19T00:00:00

ubuntucve

CVE-2022-21556

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

2022-07-19T00:00:00

ubuntu

Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, spoof the UI, bypass CSP restrictions, or execute...

2022-07-14T00:00:00

ubuntu

Python vulnerability

It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary...

10.0 CVSS

2022-07-14T00:00:00

ubuntu

Git vulnerabilities

Carlo Marcelo Arenas Belón discovered that an issue related to CVE-2022-24765 still affected Git. An attacker could possibly use this issue to run arbitrary commands as administrator....

6.9 CVSS

2022-07-13T00:00:00

ubuntu

X.Org X Server vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain inputs. An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code and escalate...

2022-07-12T00:00:00

ubuntucve

CVE-2022-29187

Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when...

6.9 CVSS

2022-07-12T00:00:00

ubuntucve

CVE-2022-2319

X.Org Server ProcXkbSetGeometry Out-Of-Bounds Access Notes Author| Note ---|--- mdeslaur | xorg server is actually the xorg-server package the xorg package only contains docs xwayland package contains parts of...

2022-07-12T00:00:00

ubuntucve

CVE-2022-2320

X.Org Server ProcXkbSetDeviceInfo Out-Of-Bounds Access Notes Author| Note ---|--- mdeslaur | xorg server is actually the xorg-server package the xorg package only contains docs xwayland package contains parts of...

2022-07-12T00:00:00

ubuntu

Dovecot vulnerability

Julian Brook discovered that Dovecot incorrectly handled multiple passdb configuration entries. In certain configurations, a remote attacker could possibly use this issue to escalate...

2022-07-11T00:00:00

ubuntu

Python LDAP vulnerability

It was discovered that Python LDAP incorrectly handled certain regular expressions. An remote attacker could possibly use this issue to cause a denial of...

4.0 CVSS

2022-07-11T00:00:00

ubuntucve

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead...

2022-07-07T00:00:00

ubuntu

NSS vulnerabilities

Tavis Ormandy discovered that NSS incorrectly handled an empty pkcs7 sequence. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-22747) Ronald Crane...

2022-07-07T00:00:00

ubuntu

GnuPG vulnerability

Demi Marie Obenour discovered that GnuPG incorrectly handled injection in the status message. A remote attacker could possibly use this issue to forge...

5.8 CVSS

2022-07-05T00:00:00

ubuntucve

CVE-2022-34473

Notes Notes Author| Note ---|--- tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox...

2022-07-05T00:00:00

ubuntucve