2,451 results · Clear filters · Feed
-
High max 8.4USN-7438-1 2 CVEs
7zip vulnerabilities
Igor Pavlov discovered that 7-Zip had several memory-related issues. An attacker could possibly use these issues to cause 7-Zip to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2023-52168, CVE-2023-52169)
first Apr 15, 2025 -
High max 7.0USN-7432-1 5 CVEs
libsoup2.4, libsoup3 vulnerabilities
It was discovered that libsoup could be made to read out of bounds. An attacker could possibly use this issue to cause applications using libsoup to crash, resulting in a denial of service. (CVE-2025-2784, CVE-2025-32050, CVE-2025-32052, CVE-2025-32053) It wa…
first Apr 10, 2025 -
High max 7.5USN-7424-1 1 CVE
expat vulnerability
It was discovered that Expat could crash due to stack overflow when processing XML documents with deeply nested entity references. If a user or automated system were tricked into processing specially crafted XML input, an attacker could use this issue to caus…
first Apr 8, 2025 -
High max 7.5USN-7425-1 1 CVE
erlang vulnerability
It was discovered that Erlang OTP's SSH module did not limit the size of certain data in initialization messages. An attacker could possibly use this issue to consume large amount of memory leading to a denial of service.
first Apr 8, 2025 -
High max 7.5
tomcat9 vulnerability
It was discovered that Tomcat incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause tomcat9 to consume resources, leading to a denial of service.
first Apr 7, 2025 -
High max 7.5
trafficserver vulnerability
It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to cause Apache Traffic Server to crash, resulting in a denial of service.
first Apr 28, 2025 -
High max 7.5USN-7372-1 1 CVE
varnish vulnerability
Martin van Kervel Smedshammer discovered that Varnish did not properly sanitize certain HTTP headers. A remote attacker could possibly use this issue to perform a cross-site request forgery (CSRF) attack.
first Mar 26, 2025 -
High max 7.5USN-7370-1 3 CVEs
smartdns vulnerabilities
It was discovered that SmartDNS did not correctly align certain objects in memory, leading to undefined behaviour. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CV…
first Mar 25, 2025 -
High max 7.3USN-7377-1 1 CVE
smarty vulnerability
It was discovered that Smarty did not properly sanitize template file names. An attacker could possibly use this issue to cause Smarty to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 27, 2025 -
High max 7.5USN-7351-1 6 CVEs
resteasy vulnerabilities
Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this issue to modify the app's behavior for other users through the network. (CVE-2020-10688) Mirko Selber discovered that RE…
first Mar 13, 2025 -
High max 7.0USN-7359-1 2 CVEs
valkey vulnerabilities
It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-46981) It was discovered that Valkey did not properly handle resource access permissions. An authenticated att…
first Mar 19, 2025 -
High max 8.7USN-7355-1 4 CVEs
restrictedpython vulnerabilities
Nakul Choudhary and Robert Xiao discovered that RestrictedPython did not properly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-37271) Ab…
first Mar 18, 2025 -
High max 7.0USN-7345-1 1 CVE
dotnet8, dotnet9 vulnerability
Zahid TOKAT discovered that .NET suffered from a weak authentication vulnerability. An attacker could possibly use this issue to elevate privileges.
first Mar 11, 2025 -
High max 7.5USN-7427-1 1 CVE
dotnet8, dotnet9 vulnerability
James Newton-King discovered that .NET did not properly limit resource allocation when handling certain HTTP/3 requests. An attacker could possibly use this issue to cause a denial of service.
first Apr 8, 2025 -
High max 8.1USN-7315-2 1 CVE
postgresql-10 vulnerability
USN-7315-1 fixed a vulnerability in PostgreSQL. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Stephen Fewer discovered that PostgreSQL incorrectly handled quoting syntax in certain scenarios. A remote attacker …
first Apr 30, 2025 -
High max 7.0USN-7313-1 1 CVE
erlang vulnerability
It was discovered that Erlang incorrectly handled SFTP packet sizes. A remote attacker could possibly use this issue to cause Erlang to consume resources, resulting in a denial of service.
first Mar 3, 2025 -
High max 7.5USN-7250-1 5 CVEs
netdata vulnerabilities
It was discovered that Netdata incorrectly handled parsing JSON input, which could lead to a JSON injection. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-18836) It was discovered tha…
first Feb 3, 2025 -
High max 7.5USN-7247-1 5 CVEs
opencv vulnerabilities
It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. If a user were tricked into loading a specially crafted file, a remote attacker could possibly use this issue to make OpenCV crash, resulting in a d…
first Feb 3, 2025 -
High max 7.5USN-7047-1 4 CVEs
knot-resolver vulnerabilities
Vladimír Čunát discovered that Knot Resolver incorrectly handled input during DNSSEC validation. A remote attacker could possibly use this issue to bypass certain validations. (CVE-2019-10190) Vladimír Čunát discovered that Knot Resolver incorrectly handled i…
first Oct 1, 2024 -
High max 7.5USN-7319-1 5 CVEs
cmark-gfm vulnerabilities
It was discovered that cmark-gfm's autolink extension did not correctly handle parsing large inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-39209) It wa…
first Mar 3, 2025 -
High max 8.1USN-7315-1 1 CVE
postgresql-12, postgresql-14, postgresql-16 vulnerability
Stephen Fewer discovered that PostgreSQL incorrectly handled quoting syntax in certain scenarios. A remote attacker could possibly use this issue to perform SQL injection attacks.
first Mar 3, 2025 -
High max 7.8USN-7299-1 8 CVEs
xorg-server, xwayland vulnerabilities
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, or possibly execute arbitrary code.
first Feb 25, 2025 -
High max 7.5USN-7292-1 2 CVEs
Several security issues were fixed in Dropbear
Manfred Kaiser discovered that Dropbear through 2020.81 does not properly check the available authentication methods in the client-side SSH code. An attacker could use this vulnerability to gain unauthorized access to remote systems. (CVE-2021-36369) Fabian B…
first Feb 25, 2025 -
High max 7.5USN-7272-1 9 CVEs
symfony vulnerabilities
Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this issue to obtain sensitive information and access unauthorized resources. (CVE-2022-24894) Marco Squarcina discovered that Symfony in…
first Feb 18, 2025 -
High max 8.4USN-7271-1 1 CVE
python-virtualenv vulnerability
It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute arbitrary code.
first Feb 18, 2025 -
High max 8.4USN-7271-2 1 CVE
python-virtualenv vulnerability
USN-7271-1 fixed a vulnerability in virtualenv. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could…
first Feb 25, 2025 -
High max 7.5USN-7241-1 2 CVEs
bind9 vulnerabilities
Toshifumi Sakaguchi discovered that Bind incorrectly handled many records in the additional section. A remote attacker could possibly use this issue to cause Bind to consume CPU resources, leading to a denial of service. (CVE-2024-11187) Jean-François Billaud…
first Jan 29, 2025 -
High max 7.5USN-7251-1 1 CVE
harfbuzz vulnerability
It was discovered that HarfBuzz incorrectly handled shaping certain fonts. A remote attacker could possibly use this issue to cause HarfBuzz to consume resources, leading to a denial of service.
first Feb 3, 2025 -
High max 7.1USN-7222-1 2 CVEs
bluez vulnerabilities
Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user were tricked into connecting to a malicious Bluetooth device, a remote attacker could possibly use this issue to execute arbitrary code.
first Jan 22, 2025 -
High max 7.5USN-7212-1 3 CVEs
python2.7 vulnerabilities
It was discovered that Python incorrectly handled certain ZIP files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2019-9674) It was discovered that Python incorrectly handled certain i…
first Jan 16, 2025 -
High max 7.0USN-7192-1 1 CVE
xfpt vulnerability
It was discovered that xfpt did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the application to crash or execute arbitrary code.
first Jan 9, 2025 -
High max 8.6USN-7175-1 7 CVEs
gst-plugins-base1.0 vulnerabilities
Antonio Morales discovered that GStreamer Base Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Dec 18, 2024 -
High max 7.5USN-7180-1 5 CVEs
python2.7 vulnerabilities
It was discovered that Python incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2022-48560) It was discovered that Python did not properly handle XML entity declarations in plist fi…
first Jan 6, 2025 -
High max 8.6USN-7176-1 22 CVEs
gst-plugins-good1.0 vulnerabilities
Antonio Morales discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Dec 18, 2024 -
High max 7.5USN-7126-1 3 CVEs
libsoup2.4 vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. (CVE-2024-52530) It was discovered that libsoup did not correctly handle memory w…
first Nov 27, 2024 -
High max 7.3USN-7158-1 3 CVEs
smarty3 vulnerabilities
It was discovered that Smarty incorrectly handled query parameters in requests. An attacker could possibly use this issue to inject arbitrary Javascript code, resulting in denial of service or potential execution of arbitrary code. This issue only affected Ub…
first Dec 12, 2024 -
High max 8.8USN-7132-1 4 CVEs
postgresql-12, postgresql-14, postgresql-16 vulnerabilities
It was discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. (CVE-2024-10976) Jacob Champion discovered that PostgreSQL clients used untrusted ser…
first Dec 2, 2024 -
High max 7.5USN-7127-1 3 CVEs
libsoup3 vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-52530) …
first Nov 27, 2024 -
High max 7.5USN-7150-1 2 CVEs
python-tornado vulnerabilities
It was discovered that Tornado incorrectly handled a certain redirect. A remote attacker could possibly use this issue to redirect a user to an arbitrary web site and conduct a phishing attack by having the user access a specially crafted URL. This issue was …
first Dec 11, 2024 -
High max 8.0USN-7130-1 1 CVE
gh vulnerability
It was discovered that GitHub CLI incorrectly handled username validation. An attacker could possibly use this issue to perform remote code execution if the user connected to a malicious server. (CVE-2024-52308)
first Nov 26, 2024