Ecosystem
Ubuntu
61,840 known vulnerabilities.
Most affected packages
linux-raspi2 20,485
linux-hwe 20,446
linux-azure 20,415
linux-riscv 20,411
linux-gcp 20,386
linux-gke 20,179
linux-hwe-edge 20,121
linux-oem 20,070
linux-azure-fde 19,897
linux-realtime 19,866
linux-raspi-realtime 19,864
linux-intel-iot-realtime 19,858
linux-azure-edge 19,855
linux-gke-4.15 19,853
linux-aws-5.0 19,793
linux-oracle-5.0 19,790
linux-gcp-5.3 19,760
linux-azure-5.3 19,750
linux-oracle-5.3 19,680
linux-aws-5.3 19,674
linux-oem-5.6 19,576
linux-hwe-5.8 19,520
linux-riscv-5.8 19,516
linux-oem-5.10 19,462
linux-aws-5.8 19,454
linux-gcp-5.8 19,453
linux-oracle-5.8 19,453
linux-gke-5.4 19,441
linux-gkeop-5.4 19,441
linux-azure-5.8 19,441
linux-hwe-5.11 19,413
linux-azure-5.11 19,392
linux-gcp-5.11 19,392
linux-oracle-5.11 19,392
linux-aws-5.11 19,391
linux-riscv-5.11 19,386
linux-intel-5.13 19,365
linux-oem-5.13 19,351
linux-hwe-5.13 19,324
linux-azure-5.13 19,306
12,735 results · Clear filters · Feed
-
Medium 5.3
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUser…
-
Medium 5.3
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When cha…
-
Medium 5.3
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by …
-
Medium 5.4
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Stor…
-
Medium 5.3
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API public…
-
Medium 5.3
Hashicorp Nomad Information Exposure Through Environmental Variables
HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/template.
-
Medium 6.3
hughsk flat index.js unflatten prototype pollution
A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollutio…
-
Medium 5.5
Macaron i18n i18n.go redirect
A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version …
-
Medium 6.5
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs,…
-
Medium 5.3
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.…
-
Medium 5.3
An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF ima…
-
Medium 5.3
An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Proje…
-
Medium 5.9
Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenI…
-
Medium 5.9
An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImage…
-
Medium 5.9
A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.…
-
Medium 5.9
Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenI…
-
Medium 5.9
A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v…
-
Medium 5.9
An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Proje…
-
Medium 6.5
Heap buffer overflow in pjproject when decoding STUN message
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a cert…
-
Medium 5.5
An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_urin…
-
Medium 6.5CVE-2022-47938 EPSS 60%
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of…
-
Medium 6.5
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version se…
-
Medium 4.3
If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, …
-
Medium 6.5
A malicious website that could create a popup could have resized the popup to overlay the address bar with its own cont…
-
Medium 6.1
SVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if att…
-
Medium 6.1
The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however …
-
Medium 6.1
Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect …
-
Medium 6.5
By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object…
-
Medium 5.4
Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user con…
-
Medium 6.5
In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. …
-
Medium 6.5
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to includ…
-
Medium 6.5
When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conju…
-
Medium 6.5
When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multipl…
-
Medium 5.4
When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the exi…
-
Medium 4.3
When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both…
-
Medium 6.5
After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and pot…
-
Medium 6.5
<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on diffe…
-
Medium 5.5
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A…
-
Medium 6.5
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which wa…
-
Medium 6.5
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was z…