Ecosystem
Ubuntu
61,415 known vulnerabilities.
Most affected packages
linux-raspi2 20,480
linux-hwe 20,441
linux-azure 20,410
linux-riscv 20,406
linux-gcp 20,381
linux-gke 20,174
linux-hwe-edge 20,116
linux-oem 20,065
linux-azure-fde 19,892
linux-realtime 19,861
linux-raspi-realtime 19,859
linux-intel-iot-realtime 19,853
linux-azure-edge 19,850
linux-gke-4.15 19,848
linux-aws-5.0 19,788
linux-oracle-5.0 19,785
linux-gcp-5.3 19,755
linux-azure-5.3 19,745
linux-oracle-5.3 19,675
linux-aws-5.3 19,669
linux-oem-5.6 19,571
linux-hwe-5.8 19,515
linux-riscv-5.8 19,511
linux-oem-5.10 19,457
linux-aws-5.8 19,449
linux-gcp-5.8 19,448
linux-oracle-5.8 19,448
linux-gke-5.4 19,436
linux-gkeop-5.4 19,436
linux-azure-5.8 19,436
linux-hwe-5.11 19,408
linux-azure-5.11 19,387
linux-gcp-5.11 19,387
linux-oracle-5.11 19,387
linux-aws-5.11 19,386
linux-riscv-5.11 19,381
linux-intel-5.13 19,360
linux-oem-5.13 19,346
linux-hwe-5.13 19,319
linux-azure-5.13 19,301
2,752 results · Clear filters · Feed
-
Unscored —CVE-2017-16939 Public exploit
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to ga…
-
Unscored —
CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include p…
-
Unscored —
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB b…
-
Unscored —
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL prot…
-
Unscored —CVE-2017-13795 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13792 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13783 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13802 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13794 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13785 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13784 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13798 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13796 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
Unscored —CVE-2017-13791 Public exploit
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iClou…
-
High 7.8
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…
KEV Nov 3, 2021 -
Critical 9.8
Deserialization of Untrusted Data in Apache commons collections
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal …
-
Unscored —
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian han…
-
Unscored —CVE-2017-16541 Public exploit
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discov…
-
Unscored —
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage functio…
-
Unscored —
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image di…
-
High 8.8
GNU Wget: stack overflow in HTTP protocol handling
The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…
-
Unscored —CVE-2017-7089 Public exploit
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befo…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befo…
-
Unscored —CVE-2017-7092 Public exploit
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befo…
-
Unscored —CVE-2017-15649 Public exploit
net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Support…
-
Unscored —CVE-2017-15595 Public exploit
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded rec…
-
Critical 9.8
Remote code execution occurs in Apache Solr
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulner…
-
Unscored —
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when pro…
-
Unscored —CVE-2015-8239 Public exploit
The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts o…
-
High 7.5
Uncontrolled Resource Consumption in Apache ZooKeeper
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suff…
-
Unscored —
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE…
-
Unscored —
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL c…
-
High 7.8
Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb…
KEV Sep 9, 2024 -
Unscored —CVE-2017-0806 Public exploit
An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0,…
-
Unscored —CVE-2017-0807 Public exploit
An elevation of privilege vulnerability in the Android framework (ui framework). Product: Android. Versions: 4.4.4, 5.0…
-
High 8.1
Unrestricted Upload of File with Dangerous Type Apache Tomcat
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP fil…
KEV Mar 25, 2022 -
Unscored —
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…
-
Unscored —
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…
-
Unscored —
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vec…