Skip to content
OpenAdvisories

Ecosystem

Ubuntu

61,691 known vulnerabilities.

Most affected packages

linux-raspi2 20,484 linux-hwe 20,445 linux-azure 20,414 linux-riscv 20,410 linux-gcp 20,385 linux-gke 20,178 linux-hwe-edge 20,120 linux-oem 20,069 linux-azure-fde 19,896 linux-realtime 19,865 linux-raspi-realtime 19,863 linux-intel-iot-realtime 19,857 linux-azure-edge 19,854 linux-gke-4.15 19,852 linux-aws-5.0 19,792 linux-oracle-5.0 19,789 linux-gcp-5.3 19,759 linux-azure-5.3 19,749 linux-oracle-5.3 19,679 linux-aws-5.3 19,673 linux-oem-5.6 19,575 linux-hwe-5.8 19,519 linux-riscv-5.8 19,515 linux-oem-5.10 19,461 linux-aws-5.8 19,453 linux-gcp-5.8 19,452 linux-oracle-5.8 19,452 linux-gke-5.4 19,440 linux-gkeop-5.4 19,440 linux-azure-5.8 19,440 linux-hwe-5.11 19,412 linux-azure-5.11 19,391 linux-gcp-5.11 19,391 linux-oracle-5.11 19,391 linux-aws-5.11 19,390 linux-riscv-5.11 19,385 linux-intel-5.13 19,364 linux-oem-5.13 19,350 linux-hwe-5.13 19,323 linux-azure-5.13 19,305
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • Critical 9.8
    CVE-2016-10033 Exploited Public exploit Scanner template EPSS 100%

    Remote code execution in PHPMailer

    The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer php5-phpmailer Debian Ubuntu Alpine Packagist
    KEV Jul 7, 2025
  • Critical 9.8
    CVE-2016-4437 Exploited Public exploit Scanner template EPSS 93%

    Improper Access Control in Apache Shiro

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

    shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2016-3088 Exploited Public exploit Scanner template EPSS 98%

    Improper Input Validation in Apache ActiveMQ

    The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

    activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2015-4852 Exploited Public exploit EPSS 95%

    The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers…

    openjdk-8 libcommons-collections3-java Ubuntu
    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2015-3306 Exploited Public exploit Scanner template EPSS 99%

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

    proftpd-dfsg proftpd-dfsg Debian Ubuntu
    KEV Oct 8, 2026
  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022