Skip to content
OpenAdvisories

Ecosystem

Ubuntu

61,691 known vulnerabilities.

Most affected packages

linux-raspi2 20,484 linux-hwe 20,445 linux-azure 20,414 linux-riscv 20,410 linux-gcp 20,385 linux-gke 20,178 linux-hwe-edge 20,120 linux-oem 20,069 linux-azure-fde 19,896 linux-realtime 19,865 linux-raspi-realtime 19,863 linux-intel-iot-realtime 19,857 linux-azure-edge 19,854 linux-gke-4.15 19,852 linux-aws-5.0 19,792 linux-oracle-5.0 19,789 linux-gcp-5.3 19,759 linux-azure-5.3 19,749 linux-oracle-5.3 19,679 linux-aws-5.3 19,673 linux-oem-5.6 19,575 linux-hwe-5.8 19,519 linux-riscv-5.8 19,515 linux-oem-5.10 19,461 linux-aws-5.8 19,453 linux-gcp-5.8 19,452 linux-oracle-5.8 19,452 linux-gke-5.4 19,440 linux-gkeop-5.4 19,440 linux-azure-5.8 19,440 linux-hwe-5.11 19,412 linux-azure-5.11 19,391 linux-gcp-5.11 19,391 linux-oracle-5.11 19,391 linux-aws-5.11 19,390 linux-riscv-5.11 19,385 linux-intel-5.13 19,364 linux-oem-5.13 19,350 linux-hwe-5.13 19,323 linux-azure-5.13 19,305
All Critical High Medium Low Exploited only Public exploit

158 results · Clear filters · Feed

  • High 7.7
    CVE-2018-5430 Exploited Public exploit EPSS 48%

    TIBCO JasperReports Server Information Disclosure Vulnerability

    The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics …

    TIBCO Software TIBCO JasperReports Server TIBCO JasperReports Server for ActiveMatrix BPM TIBCO JasperReports Server - Community Edition Ubuntu
    KEV Dec 29, 2022
  • High 7.8
    CVE-2018-4878 Exploited · Ransomware Public exploit EPSS 90%

    A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to…

    flashplugin-nonfree Ubuntu
    KEV Nov 3, 2021
  • High 7.8
    CVE-2017-16651 Exploited Public exploit EPSS 46%

    Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…

    roundcube roundcube roundcubemail Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-5070 Exploited EPSS 32%

    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2017-11292 Exploited EPSS 11%

    Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an unt…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-1000253 Exploited · Ransomware Public exploit EPSS 11%

    Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb…

    linux linux Debian Ubuntu
    KEV Sep 9, 2024
  • High 8.1
    CVE-2017-12617 Exploited Public exploit Scanner template EPSS 100%

    Unrestricted Upload of File with Dangerous Type Apache Tomcat

    When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP fil…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
    KEV Mar 25, 2022
  • High 7.8
    CVE-2017-8291 Exploited Public exploit EPSS 97%

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
    KEV May 24, 2022
  • High 8.8
    CVE-2017-5030 Exploited EPSS 41%

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2016-5198 Exploited EPSS 34%

    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.0
    CVE-2016-5195 Exploited Public exploit EPSS 84%

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

    linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-7855 Exploited Public exploit EPSS 25%

    Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Lin…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-4657 Exploited Public exploit EPSS 67%

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
    KEV May 24, 2022
  • High 7.8
    CVE-2016-4171 Exploited EPSS 20%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary cod…

    flashplugin-nonfree Ubuntu
    KEV Mar 25, 2022
  • High 7.8
    CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 8.4
    CVE-2016-3714 Exploited Public exploit EPSS 97%

    The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6…

    imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu
    KEV Sep 9, 2024
  • High 7.8
    CVE-2016-1019 Exploited · Ransomware EPSS 22%

    Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or p…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-1646 Exploited EPSS 48%

    The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, d…

    chromium-browser oxide-qt libv8-3.14 Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2016-1010 Exploited EPSS 19%

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X an…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2016-0984 Exploited Public exploit EPSS 55%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2015-8651 Exploited EPSS 68%

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and be…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2015-7645 Exploited · Ransomware Public exploit EPSS 65%

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.53…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.4
    CVE-2015-3246 Exploited Public exploit

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mo…

    libuser libuser Debian Ubuntu
    KEV Aug 26, 2026
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 7.5
    CVE-2015-5477 Exploited Public exploit EPSS 100%

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

    bind9 bind9 Debian Ubuntu
    KEV Oct 8, 2026
  • High 7.8
    CVE-2015-5122 Exploited Public exploit EPSS 87%

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5123 Exploited EPSS 19%

    Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 1…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5119 Exploited Public exploit EPSS 99%

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-3113 Exploited Public exploit EPSS 100%

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-0313 Exploited Public exploit EPSS 95%

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-0310 Exploited EPSS 15%

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.43…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2015-0311 Exploited Public exploit EPSS 86%

    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2014-9163 Exploited EPSS 45%

    Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and …

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 8.8
    CVE-2014-8439 Exploited EPSS 20%

    Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 8.8
    CVE-2014-6278 Exploited Public exploit EPSS 100%

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

    bash bash Debian Ubuntu
    KEV Oct 2, 2025
  • High 7.8
    CVE-2014-3153 Exploited Public exploit EPSS 37%

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

    linux linux Debian Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2013-2596 Exploited Public exploit

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

    linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
    KEV Sep 15, 2022