Ecosystem
Ubuntu
61,165 known vulnerabilities.
Most affected packages
Latest advisories
-
High max 7.5USN-9011-1 7 CVEs
pyasn1 vulnerabilities
It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume excessive CPU resou…
first Nov 9, 2026 -
Medium max 5.9USN-9013-1 3 CVEs
fetchmail vulnerabilities
Christian Herdtweck discovered that Fetchmail incorrectly handled certain long log messages. A remote attacker could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04…
first Nov 9, 2026 -
Critical max 9.1USN-9009-1 37 CVEs
openjdk-8 vulnerabilities
It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJDK 8 did not correctl…
first Nov 9, 2026 -
High max 7.1USN-9008-1 1 CVE
libnfs vulnerability
It was discovered that libnfs did not properly enforce the maximum size bound during ZDR decoding, resulting in an out-of-bounds write. An attacker could possibly use this issue to cause libnfs to crash, resulting in a denial of service, or execute arbitrary …
first Nov 9, 2026 -
High max 7.5USN-9007-1 27 CVEs
freerdp3 vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code.
first Nov 9, 2026
60,736 results · Feed
-
High 7.5
Hibernate Validator is affected by an expression language injection vulnerability
Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions.
-
Unscored —
net: skbuff: propagate shared-frag marker in skb_zerocopy()
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(from)…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: use UNACK timeout for no…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower qd…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ADMIN to attach to an ownerles…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expirat…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit sessions on each connection The pendin…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer connection scavenging while session lo…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short SESSION_SETUP responses s…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix fiemap wild read on empty truncate…
-
Unscored —CVE-2026-99273 Public exploit
In the Linux kernel, the following vulnerability has been resolved: ksmbd: reserve space for the UTF-16 terminator in s…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the data area in SMB2_read() …
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Clear prev_fbuf on capture buffer rele…
-
Unscored —
xen-netback: defer xenvif_mcast_addr_list_free()
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen f…
-
Unscored —
xen-blkback: Avoid UAF when reading I/O statistics
In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading …
-
Unscored —
xen-netback: Fix UAF when reading statistics data
In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to …
-
High 8.4
In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting …
-
High 8.4
The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInfo, SplFileObject, and File, s…
-
Unscored —
Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP <Fault> carries a <detail><exceptionName> element, Axis loads the named class and, if a String <data> el…
-
Medium 6.3
In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\Reque…
-
Medium 5.9
undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect intercept…
-
Medium 5.9
undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subres…
-
High 8.5
A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and de…
-
High 7.4
undici is an HTTP client for Node.js. In versions 7.30.1 and 8.12.2 through 8.12.3, when an originless Agent composes t…
-
Medium 5.9
undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interce…
-
Medium 6.5
undici vulnerable to cross-user cache disclosure via same-origin redirect
undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the redirect interceptor and a shared response cache are used together, an authenticated request that is redirected to a same-origin target has the final res…
-
Low 2.0
Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.…
-
Low 2.0
Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 befor…
-
Unscored —
HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time
HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add() is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes seve…
-
Medium 6.2
Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesCha…
-
Medium 6.1
Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsing
A flaw was found in GStreamer gst-plugins-good (avidemux). In the Nikon metadata tag parser, a pointer can be dereferenced without verifying that data remains in the buffer, causing out-of-bounds reads. Because avidemux is auto-plugged by playbin, decodebin, …
-
Medium 6.1
A flaw was found in GStreamer gst-plugins-good (avidemux). In the superindex and subindex parsers, integer overflow can…
-
Medium 5.5
A flaw was found in GStreamer gst-plugins-good (avidemux). In the subindex parser, missing validation of the entry coun…
-
Medium 6.7
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files against symlinks but checks the ~/.ssh directory only with os.path.exists(). An unprivileged user on a managed node who replaces their …
-
Low 2.3
An information disclosure vulnerability in the Qt Framework QWebSocket authentication handling of the Qt WebSockets mod…
-
High 7.5
Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression
Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pattern containing a large fixed-count quantifier applied to a zero-width subexpression — e.g. (?:){50000000} — the match engine executes the empty loo…
-
Low 3.3
libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds
A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parser. The manipulation results in out-of-bounds…
-
Low 3.5
libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c of the component Extent Data File H…