1,460 results · Clear filters · Feed
-
Critical max 9.5USN-8513-1 3 CVEs
php7.0 vulnerabilities
It was discovered that PHP incorrectly handled SOAP object deduplication when processing apache:Map nodes with duplicate keys. An attacker could possibly use this to cause a use-after-free, resulting in remote code execution. (CVE-2026-6722) It was discovered…
-
Critical max 9.1USN-8509-1 18 CVEs
python3.10, python3.12, python3.14 vulnerabilities
It was discovered that Python incorrectly normalized paths in the tarfile module. An attacker could possibly use this issue to bypass path restrictions. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-13462) It was discovered that Py…
-
Critical max 9.1USN-8467-2 2 CVEs
perl vulnerabilities
USN-8467-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 25.10. Original advisory details: It was discovered that Perl's Archive::Tar module incorrectly handled symlink and hardlink targets during extraction. An …
-
Critical max 9.3USN-8483-1 2 CVEs
hplip vulnerabilities
It was discovered that HPLIP incorrectly handled certain print data. An attacker could possibly use this issue to cause HPLIP to execute arbitrary code. (CVE-2026-8631) It was discovered that HPLIP incorrectly handled certain inputs. A local attacker could po…
-
Critical max 9.8USN-8484-1 1 CVE
libgd-perl vulnerability
It was discovered that GD.pm incorrectly handled filename arguments. An attacker could possibly use this issue to execute arbitrary commands or overwrite files.
-
Critical max 9.8USN-7018-1 6 CVEs
openssl vulnerabilities
Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovsky discovered that certain Diffie-Hellman ciphersuites in the TLS specification and implemented by OpenSSL contained a flaw. A remote attacker could possibly use this issue to eavesdrop on encr…
first Sep 18, 2024 -
Critical max 9.8USN-7000-1 3 CVEs
expat vulnerabilities
Shang-Hung Wan discovered that Expat did not properly handle certain function calls when a negative input length was provided. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2024-45490) Shang-Hung Wan di…
first Sep 12, 2024 -
Critical max 9.1USN-6969-1 9 CVEs
cacti vulnerabilities
It was discovered that Cacti did not properly apply checks to the "Package Import" feature. An attacker could possibly use this issue to perform arbitrary code execution. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS and Ubuntu…
first Aug 20, 2024 -
Critical max 9.1USN-6947-1 2 CVEs
krb5 vulnerabilities
It was discovered that Kerberos incorrectly handled GSS message tokens where an unwrapped token could appear to be truncated. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-37370) It was discovered that Kerberos incorrectly …
first Aug 8, 2024 -
Critical max 9.8
libcommons-collections3-java vulnerability
It was discovered that Apache Commons Collections allowed serialization support for unsafe classes by default. A remote attacker could possibly use this issue to execute arbitrary code.
first Jul 31, 2024 -
Critical max 9.8USN-6850-1 1 CVE
openvpn vulnerability
It was discovered that OpenVPN incorrectly handled certain configurations with multiple authentication plugins. A remote attacker could possibly use this issue to bypass authentication using incomplete credentials.
first Jun 26, 2024 -
Critical max 9.8
salt vulnerabilities
It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some methods without authentication. (CVE-2020-11651, CVE-2020-11652)
first Jun 25, 2024 -
Critical max 9.8USN-6736-1 4 CVEs
klibc vulnerabilities
It was discovered that zlib, vendored in klibc, incorrectly handled pointer arithmetic. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841) Danilo Ramos discovered that zlib, vendored …
first Apr 16, 2024 -
Critical max 9.8USN-6730-1 1 CVE
maven-shared-utils vulnerability
It was discovered that Apache Maven Shared Utils did not handle double-quoted strings properly, allowing shell injection attacks. This could allow an attacker to run arbitrary code.
first Apr 11, 2024 -
Critical max 9.8USN-6722-1 1 CVE
python-django vulnerability
Simon Charette discovered that the password reset functionality in Django used a Unicode case insensitive query to retrieve accounts associated with an email address. An attacker could possibly use this to obtain password reset tokens and hijack accounts.
first Apr 8, 2024 -
Critical max 9.8USN-6587-5 6 CVEs
xorg-server vulnerabilities
USN-6587-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processing the RRChangeOutputP…
first Mar 13, 2024 -
Critical max 9.1USN-6474-1 13 CVEs
xrdp vulnerabilities
It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. (CVE-2022-23479, CVE-2022-23481, CVE-…
first Nov 8, 2023 -
Critical max 9.8USN-6411-1 3 CVEs
exim4 vulnerabilities
It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. (CVE-2023-42114) It was discovered that Exim incorrectly handled vali…
first Oct 4, 2023 -
Critical max 9.8USN-6326-1 1 CVE
python-git vulnerability
It was discovered that GitPython did not block insecure options from user inputs in the clone command. An attacker could possibly use this issue to execute arbitrary commands on the host.
first Aug 31, 2023 -
Critical max 9.8USN-6242-2 1 CVE
openssh vulnerability
USN-6242-1 fixed a vulnerability in OpenSSH. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 prov…
first Jul 31, 2023 -
Critical max 10.0USN-6209-1 6 CVEs
Gerbv vulnerabilities
Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to crash Gerbv (resulting in a denial of service), or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS…
first Jul 7, 2023 -
Critical max 9.8USN-6146-1 9 CVEs
netatalk vulnerabilities
It was discovered that Netatalk did not properly validate the length of user-supplied data in the DSI structures. A remote attacker could possibly use this issue to execute arbitrary code with the privileges of the user invoking the programs. This issue only …
first Jun 8, 2023 -
Critical max 9.8USN-6054-2 1 CVE
python-django vulnerability
USN-6054-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Moataz Al-Sharida and nawaik discovered that Django incorrectly handled uploading multiple files us…
first May 25, 2023 -
Critical max 9.8USN-5964-2 3 CVEs
curl vulnerabilities
USN-5964-1 fixed several vulnerabilities in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Harry Sintonen discovered that curl incorrectly handled certain TELNET connection options. Du…
first Mar 27, 2023 -
Critical max 10.0USN-5904-1 9 CVEs
sox vulnerabilities
Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affe…
first Mar 2, 2023 -
Critical max 9.8USN-5887-1 2 CVEs
clamav vulnerabilities
Simon Scannell discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2023-20032) Simon Scannell discovered tha…
first Feb 27, 2023 -
Critical max 9.8USN-5825-2 1 CVE
pam regressions
USN-5825-1 fixed vulnerabilities in PAM. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PAM did not correctly rest…
first Feb 6, 2023 -
Critical max 9.8USN-5825-1 1 CVE
pam vulnerability
It was discovered that PAM did not correctly restrict login from an IP address that is not resolvable via DNS. An attacker could possibly use this issue to bypass authentication.
first Jan 25, 2023 -
Critical max 9.8USN-5810-4 2 CVEs
git vulnerabilities
USN-5810-1 fixed several vulnerabilities in Git. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could…
first Mar 1, 2023 -
Critical max 9.8USN-5800-1 4 CVEs
heimdal vulnerabilities
It was discovered that Heimdal incorrectly handled certain SPNEGO tokens. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-44758) Evgeny Legerov discovered that Heimdal incorrectly handled memory when performing certain …
first Jan 12, 2023 -
Critical max 9.8USN-5787-2 1 CVE
libksba vulnerability
USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu 16.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker coul…
first Jan 9, 2023 -
Critical max 9.8USN-5702-2 1 CVE
curl vulnerability
USN-5702-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Robby Simpson discovered that curl incorrectly handled certain POST operations after PUT operations. …
first Oct 26, 2022 -
Critical max 9.8USN-5688-1 1 CVE
libksba vulnerability
It was discovered that an integer overflow could be triggered in Libksba when decoding certain data. An attacker could use this issue to cause a denial of service (application crash) or possibly execute arbitrary code.
first Oct 19, 2022 -
Critical max 9.8USN-5570-1 1 CVE
zlib vulnerability
Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Aug 17, 2022 -
Critical max 9.8USN-5532-2 1 CVE
python-bottle vulnerability
USN-5532-1 fixed a vulnerability in Bottle. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM Original advisory details: It was discovered that Bottle incorrectly handled errors during early request binding. An attacker c…
first Jul 26, 2022 -
Critical max 9.1USN-5487-3 7 CVEs
apache2 regression
USN-5487-1 fixed several vulnerabilities in Apache HTTP Server. Unfortunately it caused regressions. USN-5487-2 reverted the patches that caused the regression in Ubuntu 14.04 ESM for further investigation. This update re-adds the security fixes for Ubuntu 14…
first Jun 23, 2022 -
Critical max 9.1USN-5487-1 7 CVEs
apache2 vulnerabilities
It was discovered that Apache HTTP Server mod_proxy_ajp incorrectly handled certain crafted request. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2022-26377) It was discovered that Apache HTTP Server incorr…
first Jun 21, 2022 -
Critical max 9.8USN-5373-2 2 CVEs
python-django vulnerabilities
USN-5373-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Django incorrectly handled certain certain column aliases in the Que…
first Apr 11, 2022 -
Critical max 9.8USN-5320-1 3 CVEs
expat vulnerabilities and regression
USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an additional patch was required. This update address this regression and several other vulnerabilities. It was discovered that Expat incorrectly handled certain …
first Mar 10, 2022 -
Critical max 9.8USN-5288-1 12 CVEs
expat vulnerabilities
It was discovered that Expat incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Feb 21, 2022