Skip to content
OpenAdvisories

Ecosystem

Ubuntu

61,691 known vulnerabilities.

Most affected packages

linux-raspi2 20,484 linux-hwe 20,445 linux-azure 20,414 linux-riscv 20,410 linux-gcp 20,385 linux-gke 20,178 linux-hwe-edge 20,120 linux-oem 20,069 linux-azure-fde 19,896 linux-realtime 19,865 linux-raspi-realtime 19,863 linux-intel-iot-realtime 19,857 linux-azure-edge 19,854 linux-gke-4.15 19,852 linux-aws-5.0 19,792 linux-oracle-5.0 19,789 linux-gcp-5.3 19,759 linux-azure-5.3 19,749 linux-oracle-5.3 19,679 linux-aws-5.3 19,673 linux-oem-5.6 19,575 linux-hwe-5.8 19,519 linux-riscv-5.8 19,515 linux-oem-5.10 19,461 linux-aws-5.8 19,453 linux-gcp-5.8 19,452 linux-oracle-5.8 19,452 linux-gke-5.4 19,440 linux-gkeop-5.4 19,440 linux-azure-5.8 19,440 linux-hwe-5.11 19,412 linux-azure-5.11 19,391 linux-gcp-5.11 19,391 linux-oracle-5.11 19,391 linux-aws-5.11 19,390 linux-riscv-5.11 19,385 linux-intel-5.13 19,364 linux-oem-5.13 19,350 linux-hwe-5.13 19,323 linux-azure-5.13 19,305
All Critical High Medium Low Exploited only Public exploit

858 results · Clear filters · Feed

  • High 7.8
    CVE-2015-7645 Exploited · Ransomware Public exploit EPSS 65%

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.53…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.5
    CVE-2015-5621 Public exploit EPSS 38%

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…

    net-snmp net-snmp Debian Ubuntu
  • High 7.5
    CVE-2014-3576 Public exploit EPSS 13%

    Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.

    activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  • High 7.4
    CVE-2015-3246 Exploited Public exploit

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mo…

    libuser libuser Debian Ubuntu
    KEV Aug 26, 2026
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 8.1
    CVE-2015-5600 Public exploit

    The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processi…

    openssh openssh Debian Ubuntu
  • High 7.5
    CVE-2015-5477 Exploited Public exploit EPSS 100%

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

    bind9 bind9 Debian Ubuntu
    KEV Oct 8, 2026
  • High 7.8
    CVE-2015-5122 Exploited Public exploit EPSS 87%

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5119 Exploited Public exploit EPSS 99%

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-3113 Exploited Public exploit EPSS 100%

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-0313 Exploited Public exploit EPSS 95%

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-0311 Exploited Public exploit EPSS 86%

    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High —
    CVE-2014-7192 Public exploit EPSS 13%

    Potential for Script Injection in syntax-error

    Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

    libv8-3.14 syntax-error Ubuntu npm
  • High 8.8
    CVE-2014-6278 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

    bash bash Debian Ubuntu
    KEV Oct 2, 2025
  • High 7.8
    CVE-2014-3153 Exploited Public exploit EPSS 37%

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

    linux linux Debian Ubuntu
    KEV May 25, 2022
  • High —
    CVE-2014-0114 Public exploit EPSS 99%

    Arbitrary code execution in Apache Commons BeanUtils

    Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate…

    commons-beanutils commons-beanutils:commons-beanutils commons-beanutils Debian Ubuntu Maven
  • High 7.8
    CVE-2013-2596 Exploited Public exploit

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

    linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
    KEV Sep 15, 2022