2,451 results · Clear filters · Feed
-
High max 7.1USN-5643-1 2 CVEs
ghostscript vulnerabilities
It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of serv…
first Sep 27, 2022 -
High max 8.8USN-5649-1 7 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass Content Security Policy (CSP) or other security restrictions…
first Sep 30, 2022 -
High max 8.8USN-5581-1 5 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the contents of the addressbar, bypass security restrictions,…
first Aug 24, 2022 -
High max 8.8USN-5575-1 2 CVEs
libxslt vulnerabilities
Nicolas Grégoire discovered that Libxslt incorrectly handled certain XML. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-5815) Alexey Neyman incorrectly…
first Aug 22, 2022 -
High max 8.8
webkit2gtk vulnerability
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Sep 14, 2022 -
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Aug 15, 2022 -
High max 7.7USN-5530-1 1 CVE
php8.1 vulnerability
It was discovered that PHP incorrectly handled certain memory operations when obtaining file information. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jul 25, 2022 -
High max 7.7USN-5523-2 5 CVEs
tiff vulnerabilities
USN-5523-1 fixed several vulnerabilities in LibTIFF. This update provides the fixes for CVE-2022-0907, CVE-2022-0908, CVE-2022-0909, CVE-2022-0924 and CVE-2022-22844 for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that …
first Sep 12, 2022 -
High max 8.8USN-5506-1 2 CVEs
nss vulnerabilities
Tavis Ormandy discovered that NSS incorrectly handled an empty pkcs7 sequence. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.…
first Jul 7, 2022 -
High max 8.8USN-5494-1 2 CVEs
mozjs91 vulnerabilities
It was discovered that SpiderMonkey JavaScript Library incorrectly generated certain assembly code. An remote attacker could possibly use this issue to cause a crash or expose sensitive information. (CVE-2022-28285) It was discovered that SpiderMonkey JavaScr…
first Jun 27, 2022 -
High max 8.8USN-5522-1 2 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attac…
first Jul 18, 2022 -
High max 8.8USN-5457-1 5 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Jun 1, 2022 -
High max 8.8USN-5434-1 2 CVEs
firefox vulnerabilities
It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website, an attacker could exploit this to execute …
first May 23, 2022 -
High max 7.5USN-5429-1 1 CVE
bind9 vulnerability
Thomas Amgarten discovered that Bind incorrectly handled certain TLS connections being destroyed. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
first May 18, 2022 -
High max 8.6USN-5423-1 5 CVEs
clamav vulnerabilities
Michał Dardas discovered that ClamAV incorrectly handled parsing CHM files. A remote attacker could possibly use this issue to cause ClamAV to stop responding, resulting in a denial of service. (CVE-2022-20770) Michał Dardas discovered that ClamAV incorrectly…
first May 17, 2022 -
High max 8.8USN-5394-1 4 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Apr 28, 2022 -
High max 8.8USN-5378-2 1 CVE
xz-utils vulnerability
Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain filenames. If a user or automated system were tricked into performing xzgrep operations with specially crafted filenames, a remote attacker could overwrite arbitrary files.
first Apr 13, 2022 -
High max 8.8USN-5370-1 11 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, execute script unexpectedly, obtain sensitive information, conduct …
first Apr 7, 2022 -
High max 8.8USN-5393-1 8 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, conduct spoofing attacks, or execute arbi…
first Apr 27, 2022 -
High max 7.5USN-5355-1 1 CVE
zlib vulnerability
Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 30, 2022 -
High max 7.5USN-5324-1 1 CVE
libxml2 vulnerability
It was discovered that libxml2 incorrectly handled certain XML files. An attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 14, 2022 -
High max 8.8USN-5260-2 1 CVE
samba vulnerability
Orange Tsai discovered that the Samba vfs_fruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code as root. (CVE-2021-44142)
first Feb 1, 2022 -
High max 8.2USN-5303-1 1 CVE
php7.4, php8.0 vulnerability
It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first Feb 28, 2022 -
High max 7.8
policykit-1 vulnerability
It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue to escalate privileges to an administrator.
first Jan 25, 2022 -
High max 7.5USN-5199-1 2 CVEs
python3.6 vulnerabilities
It was discovered that the urllib.request.AbstractBasicAuthHandler class in Python contains regex with a quadratic worst-case time complexity. Specially crafted traffic from a malicious HTTP server could cause a regular expression denial of service (ReDoS) co…
first Dec 17, 2021 -
High max 7.5USN-5201-1 1 CVE
python3.8, python3.9 vulnerabilities
It was discovered that the Python urllib http client could enter into an infinite loop when incorrectly handling certain server responses (100 Continue response). Specially crafted traffic from a malicious HTTP server could cause a denial of service (Dos) con…
first Dec 17, 2021 -
High max 7.5USN-5233-1 1 CVE
clamav vulnerability
It was discovered that ClamAV incorrectly handled memory when the CL_SCAN_GENERAL_COLLECT_METADATA scan option was enabled. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
first Jan 18, 2022 -
High max 8.8
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Jan 27, 2022 -
High max 8.8USN-5191-1 1 CVE
flatpak vulnerability
It was discovered that Flatpak incorrectly handled certain AF_UNIX sockets. An attacker could use this to specially craft a Flatpak application that could escape sandbox confinement.
first Dec 14, 2021 -
High max 8.8
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Sep 22, 2021 -
High max 7.8USN-5149-1 1 CVE
accountsservice vulnerability
Kevin Backhouse discovered that AccountsService incorrectly handled memory when performing certain language setting operations. A local attacker could use this issue to escalate privileges.
first Nov 16, 2021 -
High max 8.8
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Jul 28, 2021 -
High max 7.4USN-4969-1 1 CVE
isc-dhcp vulnerability
Jon Franklin and Pawel Wieczorkiewicz discovered that DHCP incorrectly handled lease file parsing. A remote attacker could possibly use this issue to cause DHCP to crash, resulting in a denial of service.
first May 27, 2021 -
High max 7.1USN-4951-1 1 CVE
flatpak vulnerability
Anton Lydike discovered that Flatpak did not properly handle special tokens in desktop files. An attacker could use this to specially craft a Flatpak application that could escape sandbox confinement.
first May 12, 2021 -
High max 7.8
policykit-1 vulnerability
Kevin Backhouse discovered that polkit incorrectly handled errors in the polkit_system_bus_name_get_creds_sync function. A local attacker could possibly use this issue to escalate privileges.
first Jun 3, 2021 -
High max 7.5USN-4918-2 3 CVEs
clamav vulnerabilities
USN-4918-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use …
first Apr 20, 2021 -
High max 8.1USN-4929-1 3 CVEs
bind9 vulnerabilities
Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2021-25214) Siva Kakarla discovered that Bind incorrectly ha…
first Apr 29, 2021 -
High max 7.5USN-4918-1 3 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2021-1252) It was discovered that ClamAV incorrectly handled parsing PDF…
first Apr 19, 2021 -
High max 8.1USN-4737-2 1 CVE
bind9 vulnerability
USN-4737-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Bind incorrectly handled GSSAPI security policy negotiation. A remote attacker…
first Mar 1, 2021 -
High max 8.8USN-4739-1 1 CVE
webkit2gtk vulnerability
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Feb 18, 2021