2,451 results · Clear filters · Feed
-
High max 8.2USN-6530-2 1 CVE
haproxy vulnerability
Seth Manesse and Paul Plasil discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain path_end rules.
first Jul 23, 2024 -
High max 7.5USN-5546-2 8 CVEs
openjdk-8 vulnerabilities
USN-5546-1 fixed vulnerabilities in OpenJDK. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Neil Madden discovered that OpenJDK did not properly verify ECDSA signatures. A remote attacker could possibly use thi…
first Aug 4, 2022 -
High max 7.8USN-5533-1 1 CVE
vim vulnerability
It was discovered that Vim incorrectly handled memory access. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution.
first Jul 26, 2022 -
High max 7.5USN-5521-1 4 CVEs
containerd vulnerabilities
It was discovered that containerd insufficiently restricted permissions on container root and plugin directories. If a user or automated system were tricked into launching a specially crafted container image, a remote attacker could traverse directory content…
first Jul 15, 2022 -
High max 7.8USN-5516-1 3 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution.
first Jul 13, 2022 -
High max 7.8USN-5507-1 3 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected values, or execute arbitrary code. (CVE-2022-1968) It was discovered that Vim incorrectly handled memory a…
first Jul 8, 2022 -
High max 8.4USN-5498-1 8 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possible execute arbitrary code.
first Jun 30, 2022 -
High max 8.1USN-5479-2 2 CVEs
php7.0 vulnerabilities
USN-5479-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Charles Fol discovered that PHP incorrectly handled initializing certain arrays when handling the pg_query_params function…
first Jul 4, 2022 -
High max 7.4USN-5492-1 1 CVE
vim vulnerability
It was discovered that Vim incorrectly handled memory when opening and searching the contents of certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash.
first Jun 24, 2022 -
High max 8.4USN-5460-1 10 CVEs
vim vulnerabilities
It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. (CVE-2022-0554) It was discovered that Vim was not properly performing bounds check…
first Jun 6, 2022 -
High max 8.4USN-5458-1 9 CVEs
vim vulnerabilities
It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. (CVE-2021-4193) It was discovered that Vim was not …
first Jun 2, 2022 -
High max 7.8USN-5433-1 9 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. (CVE-2021-3973) It was disc…
first May 23, 2022 -
High max 8.1USN-5404-2 1 CVE
rsyslog vulnerability
USN-5404-1 addressed a vulnerability in Rsyslog. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Pieter Agten discovered that Rsyslog incorrectly handled certain requests. An attacker could possibly use this issu…
first May 24, 2022 -
High max 7.5USN-5359-2 1 CVE
rsync vulnerability
USN-5359-1 fixed vulnerabilities in rsync. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Danilo Ramos discovered that rsync incorrectly handled memory when performing certain zlib deflating operations. An atta…
first Jun 13, 2022 -
High max 7.3USN-5340-2 5 CVEs
ckeditor vulnerabilities
USN-5340-1 fixed several vulnerabilities in CKEditor. This update provides the fixes for CVE-2018-9861, CVE-2020-9281, CVE-2021-32809, CVE-2021-33829 and CVE-2021-37695 for Ubuntu 16.04 ESM. Original advisory details: Kyaw Min Thein discovered that CKEditor i…
first Mar 23, 2022 -
High max 7.5USN-6208-1 1 CVE
golang-websocket vulnerability
It was discovered that Gorilla WebSocket incorrectly handled decoding WebSocket frames. An attacker could possibly use this issue to cause a crash, resulting in a denial of service.
first Jul 6, 2023 -
High max 7.1USN-5315-1 4 CVEs
ansible vulnerabilities
It was discovered that Ansible did not properly manage directory permissions when running playbooks with an unprivileged become user. A local attacker could possibly use this issue to cause a race condition, escalate privileges and execute arbitrary code. Thi…
first Jun 7, 2022 -
High max 7.5USN-5308-1 11 CVEs
libssh2 vulnerabilities
It was discovered that libssh2 mishandled certain input. If libssh2 were used to connect to a malicious or compromised SSH server, a remote, unauthenticated attacker could possibly execute arbitrary code on the client system. (CVE-2019-3855) It was discovered…
first Mar 7, 2022 -
High max 7.5USN-5293-2 1 CVE
c3p0 vulnerability
USN-5293-1 fixed a vulnerability in c3p0. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the applic…
first Feb 22, 2022 -
High max 8.8USN-5275-1 1 CVE
bluez vulnerability
Ziming Zhang discovered that BlueZ incorrectly handled memory write operations in its gatt server. A remote attacker could possibly use this to cause BlueZ to crash leading to a denial of service, or potentially remotely execute code. (CVE-2022-0204)
first Feb 8, 2022 -
High max 7.5
adminer vulnerabilities
It was discovered that Adminer did not escape data in the history parameter of the default URI. A remote attacker could possibly use this issue to perform cross-site scripting (XSS) attacks. This issue only affected Ubuntu 20.04 ESM. (CVE-2020-35572) Adam Cro…
first Jun 3, 2022 -
High max 7.5USN-5223-2 1 CVE
apache-log4j1.2 vulnerability
USN-5223-1 fixed a vulnerability in Apache Log4j 1.2. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Apache Log4j 1.2 was vulnerable to deserialization of untrusted data if the configurati…
first Feb 8, 2022 -
High max 8.8USN-5220-1 1 CVE
composer vulnerability
It was discovered that Composer did not properly sanitize URLs for Mercurial repositories in the root composer.json and package source download URLs. A remote attacker could possibly use this issue to execute arbitrary code.
first Jul 8, 2022 -
High max 7.5USN-5215-1 1 CVE
nltk vulnerability
Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a denial of service.
first Jan 10, 2022 -
High max 7.5USN-5202-1 14 CVEs
openjdk-8, openjdk-lts vulnerabilities
Varnavas Papaioannou discovered that the FTP client implementation in OpenJDK accepted alternate server IP addresses when connecting with FTP passive mode. An attacker controlling an FTP server that an application connects to could possibly use this to expose…
first Dec 17, 2021 -
High max 7.5USN-5179-2 1 CVE
busybox vulnerability
USN-5179-1 fixed vulnerabilities in BusyBox. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were…
first May 10, 2022 -
High max 7.5USN-5080-2 2 CVEs
libgcrypt20 vulnerabilities
USN-5080-1 fixed several vulnerabilities in Libgcrypt. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An attacker could possibly use this …
first Sep 16, 2021 -
High max 7.8USN-5064-2 1 CVE
cpio vulnerability
USN-5064-1 fixed vulnerabilities in GNU cpio. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker coul…
first Jan 27, 2022 -
High max 7.1USN-5027-2 1 CVE
php-pear vulnerability
USN-5027-1 fixed a vulnerability in PEAR. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issu…
first Aug 4, 2021 -
High max 7.0USN-5020-1 3 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-31799) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to …
first Jul 21, 2021 -
High max 7.5USN-6832-1 16 CVEs
virtuoso-opensource vulnerabilities
Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2023-31607, CVE-2023-31608, CVE-2023-31609, CVE…
first Jun 13, 2024 -
High max 7.5USN-6826-1 1 CVE
libapache-mod-jk vulnerability
Karl von Randow discovered that mod_jk was vulnerable to an authentication bypass. If the configuration did not provide explicit mounts for all possible proxied requests, an attacker could possibly use this vulnerability to bypass security constraints configu…
first Jun 11, 2024 -
High max 7.6USN-4867-1 2 CVEs
runc vulnerabilities
It was discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount over the /proc directory and escalate privileges. (CVE-2019-16884) Etienne Champetier discovered that runC incorrectly checked mou…
first Aug 10, 2021 -
High max 7.8USN-4855-1 1 CVE
ipython vulnerability
It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a remote attacker could possibly use this issue to execute arbitrary code.
first Mar 15, 2021 -
High max 8.2USN-4821-1 1 CVE
openpyxl vulnerability
It was discovered that openpyxl incorrectly handled certain documents. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Mar 15, 2021 -
High max 7.5USN-4786-1 2 CVEs
node-moment vulnerabilities
It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service.
first Mar 15, 2021 -
High max 7.5USN-6448-1 1 CVE
sofia-sip vulnerability
Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker could use this issue to cause Sofia-SIP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Oct 24, 2023 -
High max 7.5USN-4478-2 1 CVE
python-rsa vulnerability
USN-4478-1 fixed a vulnerability in Python-RSA. This update provides the corresponding update for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. Original advisory details: It was discovered that Python-RSA incorrectly handled certain ciphertexts. An…
first Feb 21, 2022 -
High max 7.0USN-5261-1 2 CVEs
passenger vulnerabilities
It was discovered that Phusion Passenger incorrectly handled a file path in the application root folder. An attacker could possibly use this issue to read arbitrary files. (CVE-2017-16355) It was discovered that Phusion Passenger had a race condition in the n…
first Feb 1, 2022 -
High max 8.6USN-4989-2 2 CVEs
bluez vulnerabilities
USN-4989-1 fixed several vulnerabilities in BlueZ. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that BlueZ incorrectly checked certain permissions when pairing. A local attacker could possibl…
first Jun 16, 2021