2,451 results · Clear filters · Feed
-
High max 7.5USN-7750-1 1 CVE
libjson-xs-perl vulnerability
It was discovered that JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause JSON-XS to crash, resulting in a denial of service.
first Sep 15, 2025 -
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Aug 19, 2025 -
High max 8.8USN-7741-1 3 CVEs
postgresql-14, postgresql-16, postgresql-17 vulnerabilities
Dean Rasheed discovered that PostgreSQL incorrectly handled access control lists. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-8713) Martin Rakhmanov, Matthieu Denais, and RyotaK discovered that the PostgreSQL pg_dump u…
first Sep 8, 2025 -
High max 7.5USN-7735-1 2 CVEs
rubygems vulnerabilities
It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could use this issue to cause RubyGems to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-28755) It was discovered that …
first Sep 3, 2025 -
High max 8.6USN-7690-1 4 CVEs
openjdk-17 vulnerabilities
It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) VMashroor Hasa…
first Aug 11, 2025 -
High max 8.6USN-7674-1 5 CVEs
openjdk-lts vulnerabilities
It was discovered that the 2D component of OpenJDK 11 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) VMashroor Hasa…
first Jul 28, 2025 -
High max 8.7USN-7666-1 1 CVE
unbound vulnerabilities
Xiang Li discovered that Unbound incorrectly handled EDNS Client Subnet (ECS) in certain configurations. A remote attacker could possibly use this issue to perform a cache poisoning attack called Rebirthday Attack.
first Jul 22, 2025 -
High max 8.6USN-7661-1 5 CVEs
gobgp vulnerabilities
It was discovered that GoBGP did not properly manage memory under certain circumstances, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 22.04 LTS and Ubunt…
first Jul 22, 2025 -
High max 8.1USN-7657-1 3 CVEs
jq vulnerabilities
It was discovered that jq incorrectly handled certain values when parsing JSON data. A remote attacker could possibly use this issue to cause jq to crash, resulting in a denial of service. (CVE-2024-23337) It was discovered that jq incorrectly handled NaN val…
first Jul 21, 2025 -
High max 7.5USN-7642-1 7 CVEs
python-aiohttp vulnerabilities
Ben Kallus discovered that AIOHTTP did not correctly parse HTTP headers. A remote attacker could possibly use this issue to perform request smuggling. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-47627) Ivan Novikov discovered tha…
first Jul 17, 2025 -
High max 8.4USN-7613-1 3 CVEs
mongo-c-driver vulnerabilities
Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-6381) Karman Liu discovered that mongo-c-driver did not c…
first Jul 2, 2025 -
High max 8.8USN-7620-1 1 CVE
File::Find::Rule vulnerability
Kevin Ryde discovered that File::Find::Rule incorrectly handled certain file names. An attacker could possibly use this issue to execute arbitrary code.
first Jul 7, 2025 -
High max 7.5USN-7586-1 5 CVEs
botan vulnerabilities
It was discovered that Botan could have compiler dependent operations induced under certain circumstances. An attacker could possibly use this issue to cause undefined behavior. (CVE-2024-50382, CVE-2024-50383) Bing Shi discovered that Botan did not limit the…
first Jun 23, 2025 -
High max 7.8USN-7573-1 6 CVEs
xorg-server, xwayland vulnerabilities
Nils Emmerich discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code.
first Jun 17, 2025 -
High max 7.8USN-7580-1 1 CVE
pam vulnerability
Olivier BAL-PETRE discovered that the PAM pam_namespace module incorrectly handled user-controlled paths. In environments where pam_namespace is used, a local attacker could possibly use this issue to escalate their privileges to root.
first Jun 18, 2025 -
High max 8.6USN-7562-1 8 CVEs
tomcat vulnerabilities
It was discovered that Tomcat did not include the secure attribute for session cookies when using the RemoteIpFilter with requests from a reverse proxy. An attacker could possibly use this issue to leak sensitive information. This issue was fixed for tomcat8 …
first Jun 9, 2025 -
High max 8.8USN-7558-1 3 CVEs
gst-plugins-bad1.0 vulnerabilities
It was discovered that the AV1 codec plugin in GStreamer could be made to write out of bounds. An attacker could possibly use this issue to cause applications using the plugin to crash, resulting in a denial of service, or possibly execute arbitrary code. Thi…
first Jun 5, 2025 -
High max 8.6USN-7549-1 1 CVE
php-twig vulnerability
It was discovered that Twig did not correctly handle securing user input. An attacker could possibly use this issue to cause Twig to expose sensitive information if it opened a specially crafted file. (CVE-2024-45411)
first Jun 2, 2025 -
High max 7.5USN-7547-1 1 CVE
python-tornado vulnerability
It was discovered that Tornado inefficiently handled requests when parsing certain form data. An attacker could possibly use this issue to increase resource utilization leading to a denial of service. This issue was only addressed in Ubuntu 24.04 LTS and Ubun…
first Jun 2, 2025 -
High max 8.2USN-7444-1 8 CVEs
matrix-synapse vulnerabilities
It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An attacker could possibly use this issue to bypass authentication mechanisms. (CVE-2023-32683) It was discovered that Synapse exposed cached device information. An …
first Apr 22, 2025 -
High max 7.1USN-7346-3 11 CVEs
opensc vulnerabilities
USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not corr…
first Apr 9, 2025 -
High max 7.5USN-7297-1 3 CVEs
ProFTPD vulnerabilities
Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could use this vulnerability to bypass security features like encryption and integrity checks. (CVE-2023-…
first Feb 25, 2025 -
High max 7.5USN-7314-1 4 CVEs
krb5 vulnerabilities
It was discovered that Kerberos incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause Kerberos to consume memory,leading to a denial of service. (CVE-2024-26458, CVE-2024-26461) It was discovered that Kerberos…
first Mar 3, 2025 -
High max 8.8USN-7476-1 6 CVEs
python-scrapy vulnerabilities
It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could use this issue to gain unauthorized access to user accounts. This issue only affected Ubuntu 18.04 LTS and Ubunt…
first May 5, 2025 -
High max 7.5USN-7695-1 2 CVEs
ruby-sidekiq vulnerabilities
Anas Roubi discovered that Sidekiq did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-30151) It was di…
first Aug 14, 2025 -
High max 7.5USN-7692-1 11 CVEs
request-tracker5 vulnerabilities
It was discovered that Request Tracker was susceptible to timing attacks. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-38562) It was discovered that Request Tracker was suscept…
first Aug 13, 2025 -
High max 8.0USN-7509-1 1 CVE
dotnet8, dotnet9 vulnerability
It was discovered that .NET did not properly handle file names and paths under certain conditions. An attacker could possibly use this issue to perform spoofing over a network.
first May 16, 2025 -
High max 7.4USN-7497-1 2 CVEs
ruby-carrierwave vulnerabilities
Rikita Ishikawa discovered that CarrierWave did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-21305) Norihide Saito discove…
first May 7, 2025 -
High max 7.4USN-7483-1 3 CVEs
openjdk-21 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 21 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 21 incorrectly …
first May 6, 2025 -
High max 7.4USN-7481-1 3 CVEs
openjdk-lts vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 11 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 11 incorrectly …
first May 6, 2025 -
High max 7.4USN-7482-1 3 CVEs
openjdk-17 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 17 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 17 incorrectly …
first May 6, 2025 -
High max 7.5
nodejs vulnerability
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for Node.js. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An…
first Apr 29, 2025 -
High max 7.3USN-7472-1 3 CVEs
micropython vulnerabilities
Junwha Hong and Wonil Jang discovered that Micropython incorrectly handled the length of a buffer in mp_vfs_umount, leading to a heap-based buffer overflow vulnerability. If a user or automated system were tricked into opening a specially crafted file, an att…
first May 1, 2025 -
High max 7.5
h2o vulnerability
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for H2O. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An att…
first Apr 30, 2025 -
High max 8.6USN-7456-1 2 CVEs
php-twig vulnerabilities
Fabien Potencier discovered that Twig did not run sandbox security checks in some circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 L…
first Apr 24, 2025 -
High max 7.4USN-7447-1 1 CVE
yelp, yelp-xsl vulnerability
It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious downloaded help files and exfiltrate sensitive information.
first Apr 23, 2025 -
High max 7.8USN-7437-1 2 CVEs
cimg vulnerabilities
It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1325) It was discovered that th…
first Apr 15, 2025 -
High max 8.2USN-7446-1 1 CVE
libapache2-mod-auth-openidc vulnerability
It was discovered that mod_auth_openidc incorrectly handled certain POST requests. An attacker could possibly use this issue to obtain sensitive information.
first Apr 23, 2025 -
High max 7.5USN-7439-1 3 CVEs
quickjs vulnerabilities
It was discovered that QuickJS could be forced to reference uninitialized memory in certain instances. An attacker could possibly use this issue to cause QuickJS to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2023-48183) It was di…
first Apr 15, 2025 -
High max 7.5
tomcat8 vulnerability
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for Apache Tomcat. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protoc…
first Apr 28, 2025