Skip to content
OpenAdvisories

Ecosystem

Ubuntu

61,840 known vulnerabilities.

Most affected packages

linux-raspi2 20,485 linux-hwe 20,446 linux-azure 20,415 linux-riscv 20,411 linux-gcp 20,386 linux-gke 20,179 linux-hwe-edge 20,121 linux-oem 20,070 linux-azure-fde 19,897 linux-realtime 19,866 linux-raspi-realtime 19,864 linux-intel-iot-realtime 19,858 linux-azure-edge 19,855 linux-gke-4.15 19,853 linux-aws-5.0 19,793 linux-oracle-5.0 19,790 linux-gcp-5.3 19,760 linux-azure-5.3 19,750 linux-oracle-5.3 19,680 linux-aws-5.3 19,674 linux-oem-5.6 19,576 linux-hwe-5.8 19,520 linux-riscv-5.8 19,516 linux-oem-5.10 19,462 linux-aws-5.8 19,454 linux-gcp-5.8 19,453 linux-oracle-5.8 19,453 linux-gke-5.4 19,441 linux-gkeop-5.4 19,441 linux-azure-5.8 19,441 linux-hwe-5.11 19,413 linux-azure-5.11 19,392 linux-gcp-5.11 19,392 linux-oracle-5.11 19,392 linux-aws-5.11 19,391 linux-riscv-5.11 19,386 linux-intel-5.13 19,365 linux-oem-5.13 19,351 linux-hwe-5.13 19,324 linux-azure-5.13 19,306
All Critical High Medium Low Exploited only Public exploit

59 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-7247 Exploited Public exploit Scanner template EPSS 99%

    smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to…

    opensmtpd opensmtpd opensmtpd Debian Ubuntu Alpine
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-5544 Exploited · Ransomware Public exploit Scanner template EPSS 98%

    OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

    openslp-dfsg openslp Virtualization Ubuntu Azure Linux
    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2019-11708 Exploited Public exploit EPSS 56%

    Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV May 23, 2022
  • Critical 9.0
    CVE-2019-10149 Exploited Public exploit EPSS 100%

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

    Exim Exim exim4 exim4 Debian Ubuntu Alpine
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2018-7600 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Drupal Core Remote Code Execution Vulnerability

    Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

    drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-6789 Exploited · Ransomware Public exploit EPSS 82%

    An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted me…

    exim4 exim4 exim Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2015-7501 Exploited Public exploit Scanner template EPSS 86%

    Deserialization of Untrusted Data in Apache commons collections

    Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal …

    commons-collections:commons-collections org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic org.apache.commons:commons-collections4 libcommons-collections3-java Debian Ubuntu Maven
  • Critical 9.8
    CVE-2017-9841 Exploited Public exploit Scanner template EPSS 100%

    Code Injection in PHPUnit

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

    phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
    KEV Feb 15, 2022
  • Critical 9.8
    CVE-2017-7494 Exploited · Ransomware Public exploit EPSS 99%

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…

    Samba Samba samba samba Debian Ubuntu Azure Linux Alpine
    KEV Mar 30, 2023
  • Critical 9.8
    CVE-2016-8735 Exploited EPSS 90%

    Apache Tomcat Improper Access Control vulnerability

    Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this lis…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
    KEV May 12, 2023
  • Critical 9.8
    CVE-2016-10033 Exploited Public exploit Scanner template EPSS 100%

    Remote code execution in PHPMailer

    The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer php5-phpmailer Debian Ubuntu Alpine Packagist
    KEV Jul 7, 2025
  • Critical 9.8
    CVE-2016-4437 Exploited Public exploit Scanner template EPSS 93%

    Improper Access Control in Apache Shiro

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

    shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2016-3088 Exploited Public exploit Scanner template EPSS 98%

    Improper Input Validation in Apache ActiveMQ

    The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

    activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2016-3427 Exploited EPSS 92%

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows re…

    openjdk-8 openjdk-7 openjdk-6 Ubuntu
    KEV May 12, 2023
  • Critical 9.8
    CVE-2015-4852 Exploited Public exploit EPSS 95%

    The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers…

    openjdk-8 libcommons-collections3-java Ubuntu
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2015-2590 Exploited EPSS 25%

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2015-3306 Exploited Public exploit Scanner template EPSS 99%

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

    proftpd-dfsg proftpd-dfsg Debian Ubuntu
    KEV Oct 8, 2026
  • Critical 9.8
    CVE-2014-7169 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022