Skip to content
OpenAdvisories

Ecosystem

Ubuntu

61,840 known vulnerabilities.

Most affected packages

linux-raspi2 20,485 linux-hwe 20,446 linux-azure 20,415 linux-riscv 20,411 linux-gcp 20,386 linux-gke 20,179 linux-hwe-edge 20,121 linux-oem 20,070 linux-azure-fde 19,897 linux-realtime 19,866 linux-raspi-realtime 19,864 linux-intel-iot-realtime 19,858 linux-azure-edge 19,855 linux-gke-4.15 19,853 linux-aws-5.0 19,793 linux-oracle-5.0 19,790 linux-gcp-5.3 19,760 linux-azure-5.3 19,750 linux-oracle-5.3 19,680 linux-aws-5.3 19,674 linux-oem-5.6 19,576 linux-hwe-5.8 19,520 linux-riscv-5.8 19,516 linux-oem-5.10 19,462 linux-aws-5.8 19,454 linux-gcp-5.8 19,453 linux-oracle-5.8 19,453 linux-gke-5.4 19,441 linux-gkeop-5.4 19,441 linux-azure-5.8 19,441 linux-hwe-5.11 19,413 linux-azure-5.11 19,392 linux-gcp-5.11 19,392 linux-oracle-5.11 19,392 linux-aws-5.11 19,391 linux-riscv-5.11 19,386 linux-intel-5.13 19,365 linux-oem-5.13 19,351 linux-hwe-5.13 19,324 linux-azure-5.13 19,306
All Critical High Medium Low Exploited only Public exploit

2,169 results · Clear filters · Feed

  • Low —
    CVE-2014-3594

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

    Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggre…

    horizon horizon horizon Debian Ubuntu PyPI
  • Low —
    CVE-2014-5274

    phpMyAdmin cross-site scripting vulnerability in crafted view name

    Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Low —
    CVE-2014-4986

    phpMyAdmin cross-site scripting Vulnerability in Table or Column Names

    Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Low —
    CVE-2014-3801

    OpenStack Heat template URL information leakage

    OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list.

    heat heat openstack-heat Debian Ubuntu PyPI
  • Low —
    CVE-2014-0085

    Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse

    JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of t…

    zookeeper org.jboss.fuse:jboss-fuse Ubuntu Maven
  • Low —
    CVE-2014-1624

    pyxdg Arbitrary File Overwrite via Race Condition

    Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to…

    pyxdg pyxdg pyxdg Debian Ubuntu PyPI
  • Low —
    CVE-2013-1833

    Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module

    Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted fi…

    moodle/moodle moodle Ubuntu Packagist
  • Low —
    CVE-2013-1835

    Moodle's login_as feature leaks information from external repositories

    Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.

    moodle/moodle moodle Ubuntu Packagist
  • Low —
    CVE-2013-0162

    ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

    The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

    ruby_parser ruby-parser Ubuntu RubyGems