2,451 results · Clear filters · Feed
-
High max 7.5USN-7881-1 2 CVEs
openjdk-8 vulnerabilities
Jinfeng Guo discovered that the Security component of OpenJDK 8 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-5305…
first Nov 24, 2025 -
High max 7.5USN-7870-1 2 CVEs
freeglut vulnerabilities
It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service.
first Nov 17, 2025 -
High max 7.9USN-7866-1 9 CVEs
intel-microcode vulnerabilities
Barak Gross discovered that some Intel® Xeon® processors with SGX enabled did not properly handle buffer restrictions. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-20053) Avinash Maddy discovered that som…
first Nov 10, 2025 -
High max 7.8USN-7852-2 1 CVE
libxml2 vulnerability
USN-7582-1 fixed a vulnerability in libxml2. This update provides the corresponding fix for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that libxslt, used by libxml2, incorrectly handled certain attrib…
first Nov 27, 2025 -
High max 7.5USN-7840-1 6 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that the REXML module bunded into Ruby incorrectly handled parsing XML documents with repeated instances of certain characters. An attacker could possibly use this issue to cause REXML to consume excessive resources, leading to a denial of s…
first Oct 27, 2025 -
High max 7.1USN-7831-1 4 CVEs
erlang vulnerabilities
It was discovered that Erlang incorrectly handled resource allocation and consumption in the SFTP SSH module. An attacker could possibly use this issue cause Erlang to consume excessive resources, leading to a denial of service.
first Oct 21, 2025 -
High max 7.8USN-7825-1 8 CVEs
mupdf vulnerabilities
It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-1000036) It was discovered that MuPDF could enter…
first Oct 16, 2025 -
High max 7.5USN-7814-1 4 CVEs
libhtp vulnerabilities
It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE…
first Oct 9, 2025 -
High max 7.5USN-7812-1 2 CVEs
imagemagick vulnerabilities
Woojin Park, Hojun Lee, Yougin Won and Siyeon Han discovered that ImageMagick did not properly sanitize image file names. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code. (CVE-202…
first Oct 8, 2025 -
High max 8.8USN-7807-1 10 CVEs
gst-plugins-base1.0 vulnerabilities
Michael Randrianantenaina discovered that GStreamer Base Plugins did not correctly handle certain integer operations. An attacker could possibly use this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453) Michael Randrianantenaina discovered tha…
first Oct 7, 2025 -
High max 7.1USN-7794-1 2 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled special characters in the QuerySet function calls. A remote attacker could possibly use this issue to perform SQL injection attacks. (CVE-2025-59681) It was discovered that Django incorrectly handled files wit…
first Oct 1, 2025 -
High max 7.8USN-7787-1 2 CVEs
libxslt vulnerabilities
Ivan Fratric discovered that Libxslt did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.
first Sep 30, 2025 -
High max 8.8USN-7783-1 3 CVEs
tiff vulnerabilities
Xudong Cao and Yuqing Zhang discovered that LibTIFF incorrectly handled memory when parsing malformed TIFF images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-8961) Xudong Cao and Yuqing Zha…
first Sep 29, 2025 -
High max 7.8USN-7781-1 4 CVEs
inetutils vulnerabilities
Matthew Hickey discovered that Inetutils did not correctly handle certain escape characters. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-0053) It was discovered that Inetutils did not correctly handle certain memory opera…
first Sep 28, 2025 -
High max 8.8USN-7756-1 4 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly handle memory when performing magnified size calculations. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-…
first Sep 18, 2025 -
High max 8.0USN-7745-1 2 CVEs
cups vulnerabilities
It was discovered that CUPS incorrectly handled authentication types other than Basic. An attacker could possibly use this issue to bypass authentication. (CVE-2025-58060) It was discovered that CUPS incorrectly handled deserialization and validation of print…
first Sep 11, 2025 -
High max 7.4USN-7728-1 3 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly process certain format strings when interpreting image filenames. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2025-53014) It was discovered…
first Sep 1, 2025 -
High max 8.5USN-7723-1 1 CVE
udisks2 vulnerability
Michael Imfeld discovered that UDisks did not check the validity of input data correctly when handling files for loop devices. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Aug 28, 2025 -
High max 7.5USN-7710-2 1 CVE
python2.7 vulnerability
USN-7710-1 fixed vulnerabilities in Python. This update provides the corresponding fix for CVE-2025-8194 for Python 2.7. Original advisory details: It was discovered that Python inefficiently parsed maliciously crafted HTML input. An attacker could possibly u…
first Aug 29, 2025 -
High max 7.5USN-7710-1 2 CVEs
python3.13, python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6, python3.5, python3.4 vulnerabilities
It was discovered that Python inefficiently parsed maliciously crafted HTML input. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-6069) It was discovered that Python incorrectly parsed maliciously crafted Tar archives. An at…
first Aug 21, 2025 -
High max 8.8USN-7677-1 2 CVEs
cloud-init vulnerabilities
Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to send hotplug-hook commands. (CVE-2024-11584) It was discovered that cloud-init granted root access to a hardcoded URL with a loca…
first Jul 28, 2025 -
High max 8.1USN-7667-1 4 CVEs
openjdk-8 vulnerabilities
It was discovered that the 2D component of OpenJDK 8 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) Mashroor Hasan …
first Jul 24, 2025 -
High max 8.8USN-7664-1 2 CVEs
ruby-sinatra vulnerabilities
It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining sensitive information. (CVE-2022-29970) It was discovered that Sinatra incorrectly handled special ch…
first Jul 22, 2025 -
High max 7.5USN-7662-1 2 CVEs
gdk-pixbuf vulnerabilities
It was discovered that GDK-Pixbuf incorrectly handled certain GIF files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-6199…
first Jul 22, 2025 -
High max 7.7USN-7657-2 2 CVEs
jq vulnerabilities
USN-7657-1 fixed CVE-2024-23337 and CVE-2025-48060 in jq. This update provides the corresponding fixes for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. Original advisory details: It was discovered that jq incorrectly handled certain values when p…
first Jul 22, 2025 -
High max 8.8USN-7647-1 5 CVEs
ledgersmb vulnerabilities
It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue to send a maliciously crafted URL to the server and obtain sensitive information, or execute arbitrary code. This issue only affected Ubuntu…
first Jul 17, 2025 -
High max 7.5
rails vulnerability
It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server. (CVE-2019-5418)
first Jul 17, 2025 -
High max 7.5USN-7643-1 5 CVEs
libsoup3, libsoup2.4 vulnerabilities
Jan Różański discovered that libsoup incorrectly handled range headers in an HTTP request. An attacker could possibly use this issue to cause libsoup to consume excessive memory, resulting in a denial of service. (CVE-2025-32907) Alon Zahavi discovered that l…
first Jul 17, 2025 -
High max 7.5USN-7630-1 11 CVEs
resteasy, resteasy3.0 vulnerabilities
It was discovered that RESTEasy made insufficient use of random values in asynchronous jobs. An attacker could possibly use this issue to steal user data. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6345) It was discovered that RESTEasy enabled a vul…
first Jul 10, 2025 -
High max 8.7USN-7629-2 2 CVEs
protobuf vulnerabilities
USN-7435-1 and USN-7629-1 fixed vulnerabilities in Protocol Buffers for several releases of Ubuntu. This update provides the corresponding fixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Pr…
first Sep 2, 2025 -
High max 8.6
git vulnerabilities
Avi Halachmi discovered that Git incorrectly managed file modification constraints with Gitk. An attacker could possibly use this issue to create or write to arbitrary files on the system. (CVE-2025-27613) Avi Halachmi discovered that Git incorrectly handled …
first Jul 8, 2025 -
High max 7.5USN-7625-1 2 CVEs
onionshare vulnerabilities
It was discovered that OnionShare could be exploited when run with the --debug argument. A local attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19960) It was di…
first Jul 8, 2025 -
High max 7.1USN-7616-1 2 CVEs
logback vulnerabilities
It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubun…
first Jul 2, 2025 -
High max 8.8USN-7603-1 5 CVEs
composer vulnerabilities
Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (C…
first Jun 30, 2025 -
High max 7.5USN-7588-1 4 CVEs
gss-ntlmssp vulnerabilities
Phil Turnbull discovered that GSS NTLMSSP may perform out-of-bounds reads when decoding NTLM fields and target information. An attacker could possibly use this issue to cause GSS NTLMSSP to crash, resulting in a denial of service. (CVE-2023-25563, CVE-2023-25…
first Jun 23, 2025 -
High max 7.8USN-7573-2 5 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities
USN-7573-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Nils Emmerich discovered that the X.Org X Server incorrectly handled certa…
first Jun 18, 2025 -
High max 7.5USN-7567-1 2 CVEs
modsecurity-apache vulnerabilities
Simon Studer discovered that ModSecurity incorrectly handled certain JSON objects. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-47947) It was discovered that ModSecurity incorrectly handled requests when parsing certain fo…
first Jun 13, 2025 -
High max 7.5USN-7565-1 6 CVEs
libsoup2.4 vulnerabilities
It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-52531) It…
first Jun 11, 2025 -
High max 7.5USN-7552-1 10 CVEs
wireshark vulnerabilities
It was discovered that Wireshark did not correctly handle recursion. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubu…
first Jun 4, 2025 -
High max 7.7USN-7544-1 1 CVE
python-setuptools, setuptools vulnerability
It was discovered that setuptools did not properly sanitize paths. An attacker could possibly use this issue to write files to arbitrary locations on the filesystem.
first May 28, 2025