Ecosystem
Ubuntu
61,840 known vulnerabilities.
Most affected packages
linux-raspi2 20,485
linux-hwe 20,446
linux-azure 20,415
linux-riscv 20,411
linux-gcp 20,386
linux-gke 20,179
linux-hwe-edge 20,121
linux-oem 20,070
linux-azure-fde 19,897
linux-realtime 19,866
linux-raspi-realtime 19,864
linux-intel-iot-realtime 19,858
linux-azure-edge 19,855
linux-gke-4.15 19,853
linux-aws-5.0 19,793
linux-oracle-5.0 19,790
linux-gcp-5.3 19,760
linux-azure-5.3 19,750
linux-oracle-5.3 19,680
linux-aws-5.3 19,674
linux-oem-5.6 19,576
linux-hwe-5.8 19,520
linux-riscv-5.8 19,516
linux-oem-5.10 19,462
linux-aws-5.8 19,454
linux-gcp-5.8 19,453
linux-oracle-5.8 19,453
linux-gke-5.4 19,441
linux-gkeop-5.4 19,441
linux-azure-5.8 19,441
linux-hwe-5.11 19,413
linux-azure-5.11 19,392
linux-gcp-5.11 19,392
linux-oracle-5.11 19,392
linux-aws-5.11 19,391
linux-riscv-5.11 19,386
linux-intel-5.13 19,365
linux-oem-5.13 19,351
linux-hwe-5.13 19,324
linux-azure-5.13 19,306
12,735 results · Clear filters · Feed
-
Medium 6.1
A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.
-
Medium 6.5
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which c…
-
Medium 5.5
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivilege…
-
Medium 4.7
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS…
-
Medium 6.5
Netdata is vulnerable to improper authentication
Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across r…
-
Medium 6.5
The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not t…
-
Medium 6.1
An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other p…
-
Medium 6.1
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 1…
-
Medium 5.5
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (sl…
-
Medium 5.3
Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp
A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.
-
Medium 5.5
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service b…
-
Medium 5.3
Upx: heap-buffer-overflow in packtmt::pack()
A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
-
Medium 6.5
Moodle Plugin - SAML Auth Open Redirect
Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors.
-
Medium 5.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions star…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions star…
-
Medium 6.3
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allo…
-
Medium 6.4
An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befo…
-
Medium 5.3
Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and…
-
Medium 5.5
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user cou…
-
Medium 5.5
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions star…
-
Medium 6.6
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conn…
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions star…
-
Medium 5.8
An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befo…
-
Medium 5.4
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions star…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions start…
-
Medium 4.3
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines…
-
Medium 5.3
A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fi…
-
Medium 5.5
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When…
-
Medium 5.3
Cargo did not verify SSH host keys
Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. An attacker could exploit this to perform man-in-the-middle (MITM) attacks. This vu…
-
Medium 5.5CVE-2022-4543 Public exploit
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local att…
-
Medium 5.5
A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not…
-
Medium 6.3
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of servi…
-
Medium 6.5
Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote a…
-
Medium 4.3
Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross…
-
Medium 6.5
Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to …
-
Medium 6.5
Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remo…
-
Medium 6.5
Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remo…
-
Medium 5.3
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. Spec…
-
Medium 6.5
workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submit…
-
Medium 5.9
Zip4j Origin Validation Error
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.