1,460 results · Clear filters · Feed
-
Critical max 9.8USN-3810-1 1 CVE
ppp vulnerability
Ivan Gotovchits discovered that ppp incorrectly handled the EAP-TLS protocol. A remote attacker could use this issue to cause ppp to crash, resulting in a denial of service, or possibly bypass authentication.
first Nov 6, 2018 -
Critical max 9.8USN-3808-1 2 CVEs
ruby1.9.1, ruby2.0, ruby2.3, ruby2.5 vulnerabilities
It was discovered that Ruby incorrectly handled certain X.509 certificates. An attacker could possibly use this issue to bypass the certificate check. (CVE-2018-16395) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly …
first Nov 5, 2018 -
Critical max 9.1USN-3795-1 1 CVE
libssh vulnerability
Peter Winter-Smith discovered that libssh incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass authentication without any credentials.
first Oct 17, 2018 -
Critical max 9.8
exim4 vulnerability
Meh Chang discovered that Exim incorrectly handled memory in certain decoding operations. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 12, 2018 -
Critical max 9.8USN-3598-1 3 CVEs
curl vulnerabilities
Phan Thanh discovered that curl incorrectly handled certain FTP paths. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2018-1000120) Dario Weisser discovered that curl incorrectly handled certain LDAP URLs. An …
first Mar 15, 2018 -
Critical max 9.8USN-3424-1 7 CVEs
libxml2 vulnerabilities
It was discovered that a type confusion error existed in libxml2. An attacker could use this to specially construct XML data that could cause a denial of service or possibly execute arbitrary code. (CVE-2017-0663) It was discovered that libxml2 did not proper…
first Sep 19, 2017 -
Critical max 9.8USN-3383-1 1 CVE
libsoup2.4 vulnerability
Aleksandar Nikolic discovered a stack based buffer overflow when handling chunked encoding. An attacker could use this to cause a denial of service or possibly execute arbitrary code.
first Aug 10, 2017 -
Critical max 9.8
samba vulnerability
It was discovered that Samba incorrectly handled shared libraries. A remote attacker could use this flaw to upload a shared library to a writable share and execute arbitrary code.
first May 24, 2017 -
Critical max 9.8USN-5504-1 17 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass CSP restrictions, bypass sandboxed ifr…
first Jul 5, 2022 -
Critical max 9.8USN-3235-1 3 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled format strings. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. This issue only affec…
first Mar 16, 2017 -
Critical max 9.8USN-7984-1 4 CVEs
pagure vulnerabilities
Thomas Chauchefoin discovered that Pagure incorrectly handled symbolic links in Git repositories. A remote attacker could possibly use this issue to cause Pagure to expose files outside the intended repository boundaries. (CVE-2024-4981) Thomas Chauchefoin di…
first Jan 29, 2026 -
Critical max 9.8
inetutils vulnerability
Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled certain environment variables. A remote attacker could use this issue to bypass authentication and open a session as an administrator.
first Feb 2, 2026 -
Critical max 9.1USN-7859-1 1 CVE
python-django vulnerabilities
It was discovered that Django incorrectly handled certain characters in queries. An attacker could possibly use this issue to execute arbitrary SQL commands.
first Nov 5, 2025 -
Critical max 9.1USN-7778-1 1 CVE
node-sha.js vulnerability
Nikita Skovoroda discovered that sha.js did not properly handle certain inputs. An attacker could possibly use this issue to manipulate the internal state of hash functions, resulting in hash collisions, denial of service, or other unspecified impact.
first Sep 25, 2025 -
Critical max 9.1USN-7746-1 1 CVE
node-cipher-base vulnerability
Nikita Skovoroda discovered that cipher-base did not properly manage certain inputs. An attacker could possibly use this issue to manipulate the internal state of hash functions, resulting in hash collisions, denial of service, or other unspecified impact.
first Sep 11, 2025 -
Critical max 9.3
sudo vulnerabilities
Rich Mirch discovered that Sudo incorrectly handled the host option. In environments where per-host rules are configured in the sudoers file, a local attacker could use this issue to bypass the host restrictions. (CVE-2025-32462) Rich Mirch discovered that Su…
first Jun 30, 2025 -
Critical max 9.1USN-7503-1 1 CVE
python-h11 vulnerability
Jeppe Bonde Weikop discovered that h11 incorrectly handled crafted HTTP requests. A remote attacker could possibly use this issue to smuggle malicious HTTP requests, which could potentially lead to security control bypass and information leakage.
first May 8, 2025 -
Critical max 10.0
activemq vulnerabilities
It was discovered that Apache ActiveMQ incorrectly handled authentication. A remote attacker could possibly use this issue to run arbitrary code. (CVE-2022-41678) It was discovered that Apache ActiveMQ incorrectly handled deserialization. A remote attacker co…
first Feb 14, 2025 -
Critical max 9.8
tomcat6 vulnerability
Pierre Ernst discovered that the Tomcat JmxRemoteLifecycleListener did not implement a recommended fix. A remote attacker could possibly use this issue to execute arbitrary code.
first Jan 30, 2025 -
Critical max 9.8USN-7230-1 1 CVE
quagga vulnerability
Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service.
first Jan 27, 2025 -
Critical max 9.8
salt vulnerability
It was discovered that Salt incorrectly handled web requests when the SSH client was enabled. An attacker could possibly use this issue to achieve remote code execution or obtain sensitive information.
first Jan 6, 2025 -
Critical max 10.0USN-7036-1 10 CVEs
ruby-rack vulnerabilities
It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a user or automated system were tricked into sending a specially crafted multipart POST request to an application using Rack, a remote attacker could possibl…
first Sep 26, 2024 -
Critical max 9.1USN-7030-1 1 CVE
py7zr vulnerability
It was discovered that py7zr was vulnerable to path traversal attacks. If a user or automated system were tricked into extracting a specially crafted 7z archive, an attacker could possibly use this issue to write arbitrary files outside the target directory o…
first Sep 24, 2024 -
Critical max 9.8USN-7017-1 1 CVE
quagga vulnerability
Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service.
first Sep 17, 2024 -
Critical max 9.8USN-7016-1 1 CVE
frr vulnerability
Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service.
first Sep 17, 2024 -
Critical max 9.1USN-6860-1 2 CVEs
openvpn vulnerabilities
Reynir Björnsson discovered that OpenVPN incorrectly handled terminating client connections. A remote authenticated client could possibly use this issue to keep the connection active, bypassing certain security policies. This issue only affected Ubuntu 23.10,…
first Jul 2, 2024 -
Critical max 9.1USN-6793-2 1 CVE
git vulnerability
USN-6793-1 fixed vulnerabilities in Git. The CVE-2024-32002 was pending further investigation. This update fixes the problem. Original advisory details: It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this iss…
first Jun 18, 2024 -
Critical max 9.1USN-6793-1 5 CVEs
git vulnerabilities
It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this issue to execute arbitrary code. This issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04 LTS. (CVE-2024-32002) It was discovered that Git in…
first May 28, 2024 -
Critical max 9.8USN-6675-1 1 CVE
ruby-image-processing vulnerability
It was discovered that ImageProcessing incorrectly handled series of operations that are coming from unsanitised inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue…
first Mar 5, 2024 -
Critical max 9.1USN-6578-1 2 CVEs
dotnet6, dotnet7, dotnet8 vulnerabilities
Vishal Mishra and Anita Gaud discovered that .NET did not properly validate X.509 certificates with malformed signatures. An attacker could possibly use this issue to bypass an application's typical authentication logic. (CVE-2024-0057) Morgan Brown discovere…
first Jan 11, 2024 -
Critical max 9.8USN-6488-1 1 CVE
strongswan vulnerability
Florian Picca discovered that strongSwan incorrectly handled certain DH public values. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 20, 2023 -
Critical max 9.1USN-6436-1 3 CVEs
frr vulnerabilities
It was discovered that the FRR did not properly check the attribute length in NRLI. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-41358) It was discovered that the FRR did not properly manage memory when reading initi…
first Oct 18, 2023 -
Critical max 9.8USN-6424-1 1 CVE
ruby-kramdown vulnerability
It was discovered that kramdown did not restrict Rouge formatters to the correct namespace. An attacker could use this issue to cause kramdown to execute arbitrary code.
first Oct 10, 2023 -
Critical max 9.8USN-6352-1 2 CVEs
shiro vulnerabilities
It was discovered that Apache Shiro incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to bypass security restrictions. (CVE-2020-13933, CVE-2020-17510)
first Sep 7, 2023 -
Critical max 9.8USN-6226-1 2 CVEs
scipy vulnerabilities
It was discovered that SciPy did not properly manage memory operations during reference counting. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-25399) A use-after-free was discovered in SciPy when handling reference counts.…
first Jul 13, 2023 -
Critical max 9.8USN-6148-1 1 CVE
sniproxy vulnerability
It was discovered that SNI Proxy did not properly handle wildcard backend hosts. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service, or arbitrary code execution.
first Jun 12, 2023 -
Critical max 9.8USN-6141-1 1 CVE
xfce4-settings vulnerability
Robin Peraglie and Johannes Moritz discovered that xfce4-settings incorrectly parsed quoted input when processed through xdg-open. A remote attacker could possibly use this issue to inject arbitrary arguments into the default browser or file manager.
first Jun 6, 2023 -
Critical max 9.8USN-6103-1 1 CVE
node-json-schema vulnerability
It was discovered that JSON Schema incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to exploit JavaScript runtimes and cause a denial…
first May 24, 2023 -
Critical max 9.8USN-6054-1 1 CVE
python-django vulnerability
Moataz Al-Sharida and nawaik discovered that Django incorrectly handled uploading multiple files using one form field. A remote attacker could possibly use this issue to bypass certain validations.
first May 3, 2023 -
Critical max 9.8USN-6021-1 20 CVEs
chromium-browser vulnerabilities
It was discovered that Chromium did not properly manage memory in several components. A remote attacker could possibly use this issue to corrupt memory via a crafted HTML page, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-15…
first Apr 28, 2023