Ecosystem
Ubuntu
61,415 known vulnerabilities.
Most affected packages
2,752 results · Clear filters · Feed
-
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…
-
Medium 4.5CVE-2019-3842 Public exploit
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using …
-
High 7.8
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…
KEV Nov 3, 2021 -
Unscored —
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —CVE-2018-4442 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —CVE-2018-4443 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —CVE-2018-4438 Public exploit
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue aff…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4386 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4382 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4328 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4323 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4315 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4317 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4318 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4306 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4312 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4197 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2019-8956 Public exploit
In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sct…
-
High 7.5
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
-
Unscored —
In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker ca…
-
High 7.5
Path Traversal in Action View
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.
KEV Jul 7, 2025 -
Medium 5.4CVE-2019-3847 Public exploit
Moodle XSS Vulnerability
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to t…
-
High 7.8
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which coul…
-
Medium 4.3
Moodle XSS Vulnerability
A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is …
-
Unscored —
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to…
-
High 7.5CVE-2019-6690 Public exploit
Improper Input Validation python-gnupg
python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Impr…
-
Unscored —
WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated us…
-
High 7.5
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reac…
-
Critical 9.8
Critical severity vulnerability that affects org.apache.solr:solr-core
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remot…
-
Unscored —CVE-2019-9213 Public exploit
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which mak…
-
Unscored —CVE-2019-6215 Public exploit
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Saf…
-
Unscored —CVE-2019-1999 Public exploit
In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead t…
-
Unscored —CVE-2019-2000 Public exploit
In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local…
-
Unscored —CVE-2019-9162 Public exploit
In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient…
-
Unscored —
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other product…
-
Medium 6.1
Bootstrap Vulnerable to Cross-Site Scripting
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
-
Unscored —
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry c…