1,460 results · Clear filters · Feed
-
Critical max 10.0USN-5896-1 2 CVEs
ruby-rack vulnerabilities
It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a user or automated system were tricked into sending a specially crafted multipart POST request to an application using Rack, a remote attacker could possibl…
first Feb 27, 2023 -
Critical max 9.1USN-5869-1 1 CVE
haproxy vulnerability
Bahruz Jabiyev, Anthony Gavazzi, Engin Kirda, Kaan Onarlioglu, Adi Peleg, and Harvey Tuch discovered that HAProxy incorrectly handled empty header names. A remote attacker could possibly use this issue to manipulate headers and bypass certain authentication c…
first Feb 14, 2023 -
Critical max 9.8USN-5810-1 2 CVEs
git vulnerabilities
Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2022-23521) Joern Schneeweisz discovered that Git incorrectly handled …
first Jan 17, 2023 -
Critical max 9.1USN-5777-2 2 CVEs
pillow-python2 vulnerabilities
USN-5777-1 fixed vulnerabilities in Pillow (Python 3). This update provides the corresponding updates for Pillow (Python 2) in Ubuntu 20.04 LTS. Original advisory details: It was discovered that Pillow incorrectly handled the deletion of temporary files when …
first Dec 14, 2022 -
Critical max 9.1USN-5777-1 2 CVEs
pillow vulnerabilities
It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An attacker could possibly use this issue to delete arbitrary files. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-…
first Dec 13, 2022 -
Critical max 9.8USN-5532-1 1 CVE
python-bottle vulnerability
It was discovered that Bottle incorrectly handled errors during early request binding. An attacker could possibly use this issue to disclose sensitive information. (CVE-2022-31799)
first Jul 26, 2022 -
Critical max 9.8USN-5501-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled certain SQL. An attacker could possibly use this issue to expose sensitive information.
first Jul 4, 2022 -
Critical max 9.8USN-5373-1 3 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled certain certain column aliases in the QuerySet.annotate(), aggregate(), and extra() methods. A remote attacker could possibly use this issue to perform an SQL injection attack. (CVE-2022-28346) It was discover…
first Apr 11, 2022 -
Critical max 9.8USN-5365-1 2 CVEs
h2database vulnerabilities
It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-42392) It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attac…
first Apr 5, 2022 -
Critical max 9.8USN-5348-3 4 CVEs
smarty3 vulnerabilities
USN-5348-1 fixed several vulnerabilities in Smarty. This update provides the fixes for CVE-2021-21408, CVE-2021-26119, CVE-2021-26120 and CVE-2021-29454 for Ubuntu 20.04 ESM. Original advisory details: David Gnedt and Thomas Konrad discovered that Smarty was …
first Jun 21, 2022 -
Critical max 9.8USN-5348-1 6 CVEs
smarty3 vulnerabilities
David Gnedt and Thomas Konrad discovered that Smarty was incorrectly sanitizing the paths present in the templates. An attacker could possibly use this use to read arbitrary files when controlling the executed template. (CVE-2018-13982) It was discovered that…
first Mar 28, 2022 -
Critical max 9.8USN-5347-1 1 CVE
openvpn vulnerability
It was discovered that OpenVPN incorrectly handled certain configurations with multiple authentication plugins. A remote attacker could possibly use this issue to bypass authentication using incomplete credentials.
first Mar 24, 2022 -
Critical max 9.1USN-5346-1 1 CVE
linux-oem-5.14 vulnerability
It was discovered that the ICMPv6 implementation in the Linux kernel did not properly deallocate memory in certain situations. A remote attacker could possibly use this to cause a denial of service (memory exhaustion).
first Mar 24, 2022 -
Critical max 10.0
redis vulnerability
Reginaldo Silva discovered that due to a packaging issue, a remote attacker with the ability to execute arbitrary Lua scripts could possibly escape the Lua sandbox and execute arbitrary code on the host.
first Mar 8, 2022 -
Critical max 10.0
apache-log4j2 vulnerability
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. An attacker could use this vulnerability to cause a denial of service. Please see the following link for more information: https:/…
first Dec 15, 2021 -
Critical max 10.0
apache-log4j2 vulnerability
Chen Zhaojun discovered that Apache Log4j 2 allows remote attackers to run programs via a special crafted input. An attacker could use this vulnerability to cause a denial of service or possibly execute arbitrary code. Please see the following link for more i…
first Dec 14, 2021 -
Critical max 9.1USN-5102-1 2 CVEs
mercurial vulnerabilities
It was discovered that Mercurial mishandled symlinks in subrepositories. An attacker could use this issue to write arbitrary files to the target’s filesystem. (CVE-2019-3902) It was discovered that Mercurial incorrectly handled certain manifest files. An atta…
first Oct 4, 2021 -
Critical max 9.8USN-4940-1 1 CVE
pyyaml vulnerability
It was discovered that PyYAML incorrectly handled untrusted YAML files with the FullLoader loader. A remote attacker could possibly use this issue to execute arbitrary code.
first May 10, 2021 -
Critical max 9.9USN-4895-1 2 CVEs
squid, squid3 vulnerabilities
Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. This issue only affected Ubuntu 2…
first Mar 29, 2021 -
Critical max 9.8USN-4854-1 1 CVE
python-asyncssh vulnerability
Matthijs Kooijman discovered that AsyncSSH server did not properly handle authentication under certain conditions. An attacker with a specially crafted client could use this vulnerability to skip authentication of SSH sessions.
first Mar 15, 2021 -
Critical max 9.8USN-4836-1 1 CVE
symfony vulnerability
It was discovered that Symfony through the HttpFoundation component allowed unauthorized access on a misconfigured LDAP server. A remote attacker could use this vulnerability to gain unauthorized access.
first Mar 15, 2021 -
Critical max 9.3USN-4728-1 1 CVE
snapd vulnerability
Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup delegation when generating systemd service units for various container management snaps. This could allow a local attacker to escalate privileges via access to arbitrary devic…
first Feb 10, 2021 -
Critical max 9.9USN-4551-1 4 CVEs
squid3 vulnerabilities
Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. (CVE-2020-15049) Amit Klein disco…
first Sep 28, 2020 -
Critical max 9.8USN-4496-1 1 CVE
Apache XML-RPC vulnerability
It was discovered that Apache XML-RPC (aka ws-xmlrpc) does not properly deserialize untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-17570)
first Sep 15, 2020 -
Critical max 9.3USN-4329-1 1 CVE
git vulnerability
Felix Wilhelm discovered that Git incorrectly handled certain URLs that included newlines. A remote attacker could possibly use this issue to trick Git into returning credential information for a wrong host.
first Apr 14, 2020 -
Critical max 9.8USN-4308-2 4 CVEs
twisted vulnerabilities
USN-4308-1 fixed several vulnerabilities in Twisted. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: it was discovered that Twisted incorrectly validated or sanitized certain URIs or HTTP methods. A remote attack…
first Mar 30, 2020 -
Critical max 9.8USN-4273-1 1 CVE
python-reportlab vulnerability
It was discovered that ReportLab incorrectly handled certain XML documents. If a user or automated system were tricked into processing a specially crafted document, a remote attacker could possibly use this issue to execute arbitrary code.
first Feb 6, 2020 -
Critical max 9.8
OpenSMTPD vulnerability
It was discovered that OpenSMTPD incorrectly verified the sender's or receiver's e-mail addresses under certain conditions. An attacker could use this vulnerability to execute arbitrary commands as root.
first Feb 5, 2020 -
Critical max 9.8USN-4264-1 1 CVE
python-django vulnerability
Simon Charette discovered that Django incorrectly handled input in the PostgreSQL module. A remote attacker could possibly use this to perform SQL injection attacks.
first Feb 4, 2020 -
Critical max 9.8USN-4259-1 1 CVE
Apache Solr vulnerability
Michael Stepankin and Olga Barinova discovered that Apache Solr was vulnerable to an XXE attack. An attacker could use this vulnerability to remotely execute code.
first Jan 29, 2020 -
Critical max 9.8USN-4252-2 28 CVEs
tcpdump vulnerabilities
USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Multiple security issues were discovered in tcpdump. A remote attacker could use these iss…
first Jan 27, 2020 -
Critical max 9.8USN-4252-1 28 CVEs
tcpdump vulnerabilities
Multiple security issues were discovered in tcpdump. A remote attacker could use these issues to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jan 27, 2020 -
Critical max 9.8USN-4224-1 1 CVE
python-django vulnerability
Simon Charette discovered that the password reset functionality in Django used a Unicode case insensitive query to retrieve accounts associated with an email address. An attacker could possibly use this to obtain password reset tokens and hijack accounts.
first Dec 19, 2019 -
Critical max 9.8USN-4175-1 1 CVE
ruby-nokogiri vulnerability
It was discovered that Nokogiri incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands.
first Nov 5, 2019 -
Critical max 9.8USN-4030-1 5 CVEs
web2py vulnerabilities
It was discovered that web2py does not properly check denied hosts before verifying passwords. An attacker could possibly use this issue to perform brute-force attacks. (CVE-2016-10321) It was discovered that web2py allows remote attackers to obtain environme…
first Jun 21, 2019 -
Critical max 9.8USN-3603-1 1 CVE
paramiko vulnerability
Matthijs Kooijman discovered that Paramiko's SSH server implementation did not properly require authentication before processing requests. An unauthenticated remote attacker could possibly use this to execute arbitrary code.
first Mar 20, 2018 -
Critical max 9.8USN-3415-1 90 CVEs
tcpdump vulnerabilities
Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service (application crash) or possibly execute arbitrary code. (CVE-2017-11543) Bhargava Shastry discovered a buffer overflow i…
first Sep 14, 2017 -
Critical max 9.8USN-3300-1 1 CVE
juju-core vulnerability
Ryan Beisner discovered juju did not set permissions on a Unix domain socket. A local attacker could use this flaw to gain administrative privileges.
first May 26, 2017 -
Critical max 9.8USN-3199-2 1 CVE
Python Crypto regression
USN-3199-1 fixed a vulnerability in the Python Cryptography Toolkit. Unfortunately, various programs depended on the original behavior of the Python Cryptography Toolkit which was altered when fixing the vulnerability. This update retains the fix for the vuln…
first Feb 17, 2017 -
Critical max 9.8USN-3199-1 1 CVE
Python Crypto vulnerability
It was discovered that the ALGnew function in block_templace.c in the Python Cryptography Toolkit contained a heap-based buffer overflow vulnerability. A remote attacker could use this flaw to execute arbitrary code by using a crafted initialization vector pa…
first Feb 16, 2017