2,451 results · Clear filters · Feed
-
High max 7.2
roundcube vulnerability
It was discovered that Roundcube Webmail was prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document. An attacker could use this issue to execute arbitrary web script in the context of an affected user's session.
-
High max 7.3USN-8481-1 1 CVE
nss vulnerability
Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11 URI escape sequences. An attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service, or obtain sensitive information.
first Jun 29, 2026 -
High max 7.5USN-7094-1 10 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled memory during certain VNC operations. A remote attacker could possibly use this issue to cause QEMU to consume resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-20…
first Nov 8, 2024 -
High max 7.8USN-7070-1 3 CVEs
libarchive vulnerabilities
It was discovered that libarchive mishandled certain memory checks, which could result in a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubunt…
first Oct 16, 2024 -
High max 8.8USN-7107-1 1 CVE
zlib vulnerability
It was discovered that Minizip in zlib incorrectly handled certain zip header fields. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.
first Nov 13, 2024 -
High max 7.5USN-7015-5 2 CVEs
python2.7 vulnerabilities
USN-7015-1 fixed several vulnerabilities in Python. This update provides the corresponding update for CVE-2024-6232 and CVE-2024-6923 for python2.7 in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Original adviso…
first Nov 19, 2024 -
High max 8.8USN-7002-1 1 CVE
python-setuptools, setuptools vulnerability
It was discovered that setuptools was vulnerable to remote code execution. An attacker could possibly use this issue to execute arbitrary code.
first Sep 12, 2024 -
High max 7.5USN-6997-2 1 CVE
tiff vulnerability
USN-6997-1 fixed a vulnerability in LibTIFF. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the appli…
first Sep 11, 2024 -
High max 8.3USN-6988-1 2 CVEs
twisted vulnerabilities
Ben Kallus discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay and manipulate responses. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671) It was…
first Sep 4, 2024 -
High max 8.0USN-6978-1 15 CVEs
libxstream-java vulnerabilities
It was discovered that XStream incorrectly handled parsing of certain crafted XML documents. A remote attacker could possibly use this issue to read arbitrary files. (CVE-2016-3674) Zhihong Tian and Hui Lu found that XStream was vulnerable to remote code exec…
first Aug 22, 2024 -
High max 8.8USN-6968-3 1 CVE
postgresql-10, postgresql-9.3 vulnerability
USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for PostgreSQL-9.3 in Ubuntu 14.04 LTS and PostgreSQL-10 in Ubuntu 18.04 LTS. Original advisory details: Noah Misch discovered th…
first Oct 14, 2024 -
High max 7.3USN-6965-1 5 CVEs
vim vulnerabilities
It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. (CVE-2021-3973) It was disco…
first Aug 21, 2024 -
High max 7.0USN-6908-1 3 CVEs
tomcat vulnerabilities
It was discovered that the Tomcat SSI printenv command echoed user provided data without escaping it. An attacker could possibly use this issue to perform an XSS attack. (CVE-2019-0221) It was discovered that Tomcat incorrectly handled certain uncommon Persis…
first Jul 23, 2024 -
High max 7.5USN-6905-1 2 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. (CVE-2023-27539) It was discovered that Rack incorrectly handled M…
first Jul 23, 2024 -
High max 8.4USN-6855-1 1 CVE
libcdio vulnerability
Mansour Gashasbi discovered that libcdio incorrectly handled certain memory operations when parsing an ISO file, leading to a buffer overflow vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code.
first Jun 28, 2024 -
High max 7.8
libspreadsheet-parseexcel-perl vulnerability
Le Dinh Hai discovered that Spreadsheet::ParseExcel was passing unvalidated input from a file into a string-type "eval". An attacker could craft a malicious file to achieve arbitrary code execution.
first May 21, 2024 -
High max 7.8USN-6762-1 5 CVEs
eglibc, glibc vulnerabilities
It was discovered that GNU C Library incorrectly handled netgroup requests. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9984) It was discovered that GNU C Library m…
first May 2, 2024 -
High max 8.6USN-6756-1 1 CVE
less vulnerability
It was discovered that less mishandled newline characters in file names. If a user or automated system were tricked into opening specially crafted files, an attacker could possibly use this issue to execute arbitrary commands on the host.
first Apr 29, 2024 -
High max 7.5USN-6735-1 3 CVEs
nodejs vulnerabilities
It was discovered that Node.js incorrectly handled the use of invalid public keys while creating an x509 certificate. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to…
first Apr 16, 2024 -
High max 7.5USN-6723-1 2 CVEs
bind9 vulnerabilities
Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered that Bind icorrectly handled validating DNSSEC messages. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. (CVE-2023-…
first Apr 9, 2024 -
High max 7.8USN-6721-1 4 CVEs
xorg-server, xwayland vulnerabilities
It was discovered that X.Org X Server incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. (CVE-2024-31080, CVE-2024-31081, CVE-2024-31082) It was discovered that X.Org X Server incorrectly handled certa…
first Apr 4, 2024 -
High max 7.8USN-6708-1 1 CVE
graphviz vulnerability
It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this issue to cause a denial of service.
first Mar 21, 2024 -
High max 7.8USN-6698-1 1 CVE
vim vulnerability
Zhen Zhou discovered that Vim did not properly manage memory. An attacker could possibly use this issue to cause a denial of service
first Mar 18, 2024 -
High max 7.5USN-6658-2 1 CVE
libxml2 vulnerability
USN-6658-1 fixed a vulnerability in libxml2. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that libxml2 incorrectly handled certain XML documents. A re…
first Mar 11, 2024 -
High max 8.6USN-6619-1 1 CVE
runc vulnerability
Rory McNamara discovered that runC did not properly manage internal file descriptor while managing containers. An attacker could possibly use this issue to obtain sensitive information or bypass container restrictions.
first Jan 31, 2024 -
High max 7.8USN-6557-1 14 CVEs
vim vulnerabilities
It was discovered that Vim could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1725) It was discovere…
first Dec 14, 2023 -
High max 8.2USN-6590-1 2 CVEs
xerces-c vulnerabilities
It was discovered that Xerces-C++ was not properly handling memory management operations when parsing XML data containing external DTDs, which could trigger a use-after-free error. If a user or automated system were tricked into processing a specially crafted…
first Jan 18, 2024 -
High max 7.8USN-6586-1 5 CVEs
freeimage vulnerabilities
It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. This issu…
first Jan 16, 2024 -
High max 7.0USN-6531-1 6 CVEs
redis vulnerabilities
Seiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled certain specially crafted Lua scripts. An attacker could possibly use this issue to cause heap corruption and execute arbitrary code. (CVE-2022-24834) SeungHyun Lee discovered that Redi…
first Dec 5, 2023 -
High max 7.5USN-6469-1 1 CVE
xrdp vulnerability
Ashley Newson discovered that xrdp incorrectly handled memory when processing certain incoming connections. An attacker could possibly use this issue to cause a denial of service or arbitrary code execution.
first Nov 2, 2023 -
High max 8.1USN-6455-1 2 CVEs
exim4 vulnerabilities
It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to memory corruption. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-42117) It was discovered that Exim incorrectly handle…
first Oct 26, 2023 -
High max 7.5USN-6421-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service.
first Oct 9, 2023 -
High max 7.8USN-6420-1 13 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 L…
first Oct 9, 2023 -
High max 7.8USN-6408-2 4 CVEs
libxpm vulnerabilities
USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed…
first Oct 23, 2023 -
High max 7.8USN-6407-2 3 CVEs
libx11 vulnerabilities
USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Gregory James Duck discovered that libx11 incorrectly handled certain key…
first Oct 10, 2023 -
High max 7.5USN-6370-1 3 CVEs
modsecurity-apache vulnerabilities
It was discovered that ModSecurity incorrectly handled certain nested JSON objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-42717) It w…
first Sep 14, 2023 -
High max 7.5USN-6335-1 2 CVEs
busybox vulnerabilities
It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a d…
first Sep 4, 2023 -
High max 7.8USN-6302-1 15 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 L…
first Aug 21, 2023 -
High max 7.8USN-6452-1 10 CVEs
vim vulnerabilities
It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. (CVE-2023-3896) It was discovered that Vim did not properly manage memory. An attacker c…
first Oct 25, 2023 -
High max 7.5USN-6303-2 1 CVE
clamav vulnerability
USN-6303-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote a…
first Aug 21, 2023