Ubuntu

2,752 results · Clear filters · Feed

• High —
  CVE-2014-0114 Public exploit EPSS 99%

  Arbitrary code execution in Apache Commons BeanUtils

  Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate…

  commons-beanutils:commons-beanutils commons-beanutils commons-beanutils Debian Ubuntu Maven
  Apr 30, 2014
• Critical 9.8
  CVE-2014-0472 Public exploit

  Code Injection in Django

  The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using u…

  python-django django python-django Debian Ubuntu PyPI
  Apr 23, 2014
• Unscored —
  CVE-2014-2851 Public exploit

  Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local user…

  linux linux Debian Ubuntu
  Apr 14, 2014
• Unscored —
  CVE-2014-2323 Public exploit Scanner template EPSS 63%

  SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary…

  lighttpd lighttpd Debian Ubuntu
  Mar 14, 2014
• Unscored —
  CVE-2014-2324 Public exploit EPSS 30%

  Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow…

  lighttpd lighttpd Debian Ubuntu
  Mar 14, 2014
• Unscored —
  CVE-2014-2299 Public exploit EPSS 47%

  Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.1…

  wireshark wireshark Debian Ubuntu
  Mar 11, 2014
• Unscored —
  CVE-2013-6668 Public exploit

  Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, all…

  chromium-browser libv8-3.14 Ubuntu
  Mar 5, 2014
• Unscored —
  CVE-2014-1684 Public exploit

  The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Play…

  vlc vlc Debian Ubuntu
  Mar 3, 2014
• Unscored —
  CVE-2012-6636 Public exploit EPSS 39%

  The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote att…

  cordova-ubuntu-3.4 Ubuntu
  Mar 3, 2014
• Unscored —
  CVE-2013-7108 Public exploit EPSS 62%

  Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.1…

  nagios3 Ubuntu
  Jan 14, 2014
• Unscored —
  CVE-2013-7233 Public exploit

  Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPr…

  wordpress wordpress Debian Ubuntu
  Dec 30, 2013
• Unscored —
  CVE-2013-4164 Public exploit EPSS 35%

  Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and tr…

  ruby2.0 ruby1.9.1 Ubuntu
  Nov 23, 2013
• Medium —
  CVE-2013-3630 Public exploit EPSS 42%

  Moodle Authenticated Spelling Binary Remote Code Execution

  Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

  moodle/moodle moodle Ubuntu Packagist
  Nov 1, 2013
• Unscored —
  CVE-2012-5627 Public exploit EPSS 11%

  Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt dur…

  mysql-5.5 mysql Ubuntu Azure Linux
  Oct 1, 2013
• Unscored —
  CVE-2013-5321 Public exploit

  Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remo…

  ossim Ubuntu
  Aug 20, 2013
• Unscored —
  CVE-2013-1942 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf)…

  jquery-jplayer Ubuntu
  Aug 15, 2013
• High 7.8
  CVE-2013-2596 Exploited Public exploit

  Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

  linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
  Apr 13, 2013

  KEV Sep 15, 2022
• Critical 9.1
  CVE-2012-3363 Public exploit EPSS 49%

  Zend Framework XXE Vulnerability

  Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element …

  zendframework/zendframework1 zend-framework Ubuntu Packagist
  Feb 13, 2013
• Unscored —
  CVE-2013-0169 Public exploit EPSS 36%

  The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…

  openssl bouncycastle nss gnutls28 Debian Ubuntu
  Feb 8, 2013
• Unscored —
  CVE-2012-5615 Public exploit EPSS 15%

  Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ve…

  mysql-5.5 mysql-5.6 Ubuntu
  Dec 3, 2012
• Unscored —
  CVE-2012-5851 Public exploit

  html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not conside…

  qtwebkit-source Ubuntu
  Nov 15, 2012
• Unscored —
  CVE-2012-3748 Public exploit EPSS 17%

  Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary…

  qtwebkit-source Ubuntu
  Nov 3, 2012
• Unscored —
  CVE-2007-6752 Public exploit

  Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authen…

  drupal7 Ubuntu
  Mar 28, 2012
• Unscored —
  CVE-2011-0222 Public exploit EPSS 22%

  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of se…

  qtwebkit-source Ubuntu
  Jul 21, 2011
• Unscored —
  CVE-2011-0167 Public exploit

  The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Poli…

  qtwebkit-source Ubuntu
  Mar 11, 2011
• Unscored —
  CVE-2010-3804 Public exploit

  The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and bef…

  qtwebkit-source Ubuntu
  Nov 20, 2010
• Unscored —
  CVE-2009-4490 Public exploit EPSS 10%

  mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

  mini-httpd mini-httpd Debian Ubuntu
  Jan 13, 2010
• Unscored —
  CVE-2009-4494 Public exploit

  AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…

  aolserver4 Ubuntu
  Jan 13, 2010
• Unscored —
  CVE-2009-4495 Public exploit

  Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

  yaws yaws Debian Ubuntu
  Jan 13, 2010
• Critical 9.8
  CVE-2009-4488 Public exploit EPSS 13%

  Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

  varnish varnish Debian Ubuntu
  Jan 13, 2010
• Unscored —
  CVE-2009-3850 Public exploit

  Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains …

  blender blender Debian Ubuntu
  Nov 6, 2009
• Critical 9.8
  CVE-2007-4559 Public exploit EPSS 27%

  Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…

  python3.4 python3.5 python2.7 python3.6 Ubuntu Azure Linux
  Aug 28, 2007