2,451 results · Clear filters · Feed
-
High max 7.5USN-7885-1 3 CVEs
openjdk-21 vulnerabilities
Jinfeng Guo discovered that the Security component of OpenJDK 21 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-530…
first Nov 24, 2025 -
High max 7.2USN-6104-1 2 CVEs
postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the bootstrap supervisor. (CVE-2023-2454) Wolfgang Walther discovered that PostgreSQL i…
first May 24, 2023 -
High max 8.2USN-6068-1 1 CVE
openvswitch vulnerability
David Marchand discovered that Open vSwitch incorrectly handled IP packets with the protocol set to 0. A remote attacker could possibly use this issue to cause a denial of service.
first May 10, 2023 -
High max 7.5USN-6060-1 20 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.33 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. Ubuntu 18.04 LTS has been updat…
first May 8, 2023 -
High max 7.4USN-6066-1 1 CVE
heat vulnerability
It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data.
first May 10, 2023 -
High max 8.8USN-6012-1 1 CVE
smarty3 vulnerability
It was discovered that Smarty incorrectly parsed blocks' names and included files' names. A remote attacker with template writing permissions could use this issue to execute arbitrary PHP code. (CVE-2022-29221)
first Apr 13, 2023 -
High max 7.5USN-5999-1 1 CVE
node-trim-newlines vulnerability
It was discovered that trim-newlines incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-33623)
first Apr 5, 2023 -
High max 7.8USN-5986-1 1 CVE
xorg-server, xorg-server-hwe-18.04, xwayland vulnerability
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could possibly use these issues to cause the X Server to crash, execute arbitrary code, or escalate privileges.
first Mar 29, 2023 -
High max 7.7USN-5992-1 1 CVE
ldb vulnerability
Demi Marie Obenour discovered that ldb, when used with Samba, incorrectly handled certain confidential attribute values. A remote authenticated attacker could possibly use this issue to obtain certain sensitive information.
first Apr 3, 2023 -
High max 7.7USN-5902-1 3 CVEs
php7.2, php7.4, php8.1 vulnerabilities
It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An invalid password hash could possibly allow applications to accept any password as valid, contrary to expectations. (CVE-2023-0567) It was discovered that PHP incorrect…
first Feb 28, 2023 -
High max 7.5USN-5868-1 1 CVE
python-django vulnerability
Jakob Ackermann discovered that Django incorrectly handled certain file uploads. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first Feb 14, 2023 -
High max 8.6USN-5907-1 1 CVE
c-ares vulnerability
It was discovered that c-ares incorrectly handled certain sortlist strings. A remote attacker could use this issue to cause c-ares to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 2, 2023 -
High max 7.7USN-5993-1 2 CVEs
samba vulnerabilities
Demi Marie Obenour discovered that the Samba LDAP server incorrectly handled certain confidential attribute values. A remote authenticated attacker could possibly use this issue to obtain certain sensitive information. (CVE-2023-0614) Andrew Bartlett discover…
first Apr 3, 2023 -
High max 7.5USN-5710-1 3 CVEs
openssl vulnerabilities
It was discovered that OpenSSL incorrectly handled certain X.509 Email Addresses. If a certificate authority were tricked into signing a specially-crafted certificate, a remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a d…
first Nov 1, 2022 -
High max 8.8USN-5782-1 7 CVEs
firefox vulnerabilities
It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use this library to perform a reentrancy issue on Firefox. (CVE-2022-46871) Nika Layzell discovered that Firefox was not performing a check on paste receive…
first Dec 15, 2022 -
High max 7.5USN-5776-1 4 CVEs
containerd vulnerabilities
It was discovered that containerd incorrectly handled memory when receiving certain faulty Exec or ExecSync commands. A remote attacker could possibly use this issue to cause a denial of service or crash containerd. (CVE-2022-23471, CVE-2022-31030) It was dis…
first Dec 13, 2022 -
High max 7.5USN-5739-1 36 CVEs
mariadb-10.3, mariadb-10.6 vulnerabilities
Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11 in Ubuntu 22.04 LTS and Ubuntu 22.10. In addition to security…
first Nov 23, 2022 -
High max 7.8USN-5760-1 3 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. (CVE-2022-2309) It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue t…
first Dec 5, 2022 -
High max 7.5USN-5585-1 8 CVEs
jupyter-notebook vulnerabilities
It was discovered that Jupyter Notebook incorrectly handled certain notebooks. An attacker could possibly use this issue of lack of Content Security Policy in Nbconvert to perform cross-site scripting (XSS) attacks on the notebook server. This issue only affe…
first Aug 30, 2022 -
High max 7.8USN-5811-1 2 CVEs
sudo vulnerabilities
Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. (CVE-…
first Jan 18, 2023 -
High max 8.8USN-5724-1 15 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass Content Security Policy (CSP) or o…
first Nov 11, 2022 -
High max 8.8USN-5663-1 12 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, spoof the mouse pointer position, obtain …
first Oct 7, 2022 -
High max 7.5USN-5626-1 6 CVEs
bind9 vulnerabilities
Yehuda Afek, Anat Bremler-Barr, and Shani Stajnrod discovered that Bind incorrectly handled large delegations. A remote attacker could possibly use this issue to reduce performance, leading to a denial of service. (CVE-2022-2795) It was discovered that Bind i…
first Sep 21, 2022 -
High max 7.5USN-5873-1 5 CVEs
golang-golang-x-text, golang-x-text vulnerabilities
It was discovered that Go Text incorrectly handled certain encodings. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14040) It was discovered that Go Text incor…
first Feb 16, 2023 -
High max 7.5USN-5845-1 2 CVEs
openssl1.0 vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this issue to read arbitrary memory contents or cause OpenSSL to crash, resulting in a denial of service. (CVE-2023-0286) Octavio Galland…
first Feb 7, 2023 -
High max 7.5USN-6233-2 3 CVEs
yajl vulnerabilities
USN-6233-1 fixed vulnerabilities in YAJL. This update provides the corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. Original advisory details: It was discovered that YAJL was not properly performing bounds checks when decoding a…
first Dec 14, 2023 -
High max 7.5USN-5837-1 1 CVE
python-django vulnerability
Nick Pope discovered that Django incorrectly handled certain Accept-Language headers. A remote attacker could possibly use this issue to cause Django to consume memory, leading to a denial of service.
first Feb 1, 2023 -
High max 8.8USN-5807-1 3 CVEs
libxpm vulnerabilities
Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a …
first Jan 17, 2023 -
High max 8.8USN-5806-2 1 CVE
ruby2.5, ruby3.0 vulnerability
USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.10. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications whic…
first Jan 23, 2023 -
High max 8.8USN-5806-3 1 CVE
ruby2.7 vulnerability
USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi …
first Mar 20, 2023 -
High max 7.5USN-5732-1 1 CVE
unbound vulnerability
It was discovered that Unbound incorrectly handled delegations with a large number of non-responsive nameservers. A remote attacker could possibly use this issue to cause Unbound to consume resources, leading to a denial of service.
first Nov 17, 2022 -
High max 7.5USN-5716-1 1 CVE
sqlite3 vulnerability
It was discovered that SQLite incorrectly handled certain long string arguments. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 7, 2022 -
High max 7.8USN-5713-1 1 CVE
python3.10 vulnerability
Devin Jeanpierre discovered that Python incorrectly handled sockets when the multiprocessing module was being used. A local attacker could possibly use this issue to execute arbitrary code and escalate privileges.
first Nov 3, 2022 -
High max 7.7USN-5764-1 7 CVEs
u-boot vulnerabilities
It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-2347) Nicolas Bidron and …
first Dec 6, 2022 -
High max 7.5USN-5651-1 1 CVE
strongswan vulnerability
Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and and CRL distribution points (CDP) in certificates. A remote attacker could possibly use this issue to initiate IKE_SAs and send crafted certificates that contain URIs point…
first Oct 3, 2022 -
High max 8.1USN-5638-2 2 CVEs
expat vulnerabilities
USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. It was discovered that Expat incorrectly handled memory in out-of-memory situations. An attacker could possi…
first Nov 17, 2022 -
High max 7.7USN-5628-2 4 CVEs
etcd vulnerabilities
USN-5628-1 fixed vulnerabilities in etcd. This update provides the corresponding updates for Ubuntu 18.04 ESM. Original advisory details: It was discovered that etcd incorrectly handled certain specially crafted WAL files. An attacker could possibly use this …
first Sep 22, 2022 -
High max 7.7USN-5628-1 4 CVEs
etcd vulnerabilities
It was discovered that etcd incorrectly handled certain specially crafted WAL files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-15106, CVE-2020-15112) It was discovered that etcd incorrectly handled directory permissions…
first Sep 22, 2022 -
High max 7.6USN-5340-1 6 CVEs
ckeditor vulnerabilities
Kyaw Min Thein discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 18.04 LTS. (CVE-2018-9861) Micha Bentkowski discovered that CKEditor incorrectly ha…
first Mar 22, 2022 -
High max 7.5USN-5360-1 7 CVEs
tomcat9 vulnerabilities
It was discovered that Tomcat incorrectly performed input verification. A remote attacker could possibly use this issue to intercept sensitive information. (CVE-2020-13943, CVE-2020-17527, CVE-2021-25122, CVE-2021-30640) It was discovered that Tomcat did not …
first Mar 31, 2022