2,451 results · Clear filters · Feed
-
High max 8.8
oxide-qt vulnerabilities
Multiple security vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, cause a denial of service via application crash, or e…
first Dec 1, 2016 -
High max 7.0
linux vulnerability
It was discovered that a race condition existed in the memory manager of the Linux kernel when handling copy-on-write breakage of private read-only memory mappings. A local attacker could use this to gain administrative privileges.
first Oct 20, 2016 -
High max 8.8USN-3041-1 14 CVEs
oxide-qt vulnerabilities
Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service (application crash) or execute arbitrar…
first Aug 5, 2016 -
High max 8.1USN-2994-1 16 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. (CVE-201…
first Jun 6, 2016 -
High max 8.4
imagemagick vulnerabilities
Nikolay Ermishkin and Stewie discovered that ImageMagick incorrectly sanitized untrusted input. A remote attacker could use these issues to execute arbitrary code. These issues are known as "ImageTragick". This update disables problematic coders via the /etc/…
first Jun 2, 2016 -
High max 8.8
oxide-qt vulnerabilities
A use-after-free was discovered when responding synchronously to permission requests. An attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program…
first Apr 27, 2016 -
High max 7.1USN-3882-1 3 CVEs
curl vulnerabilities
Wenxiang Qian discovered that curl incorrectly handled certain NTLM authentication messages. A remote attacker could possibly use this issue to cause curl to crash, resulting in a denial of service. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 18.04 LT…
first Feb 6, 2019 -
High max 8.8
firefox vulnerability
Cody Crews discovered a way to violate the same-origin policy to inject script in to a non-privileged part of the PDF viewer. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to read sensitive information from l…
first Aug 7, 2015 -
High max 7.5USN-2711-1 2 CVEs
net-snmp vulnerabilities
It was discovered that Net-SNMP incorrectly handled certain trap messages when the -OQ option was used. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service. (CVE-2014-3565) Qinghao Tang discovered that Net-SNMP …
first Aug 17, 2015 -
High max 7.7USN-3881-1 1 CVE
dovecot vulnerability
It was discovered that Dovecot incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could possibly use this issue to impersonate other users.
first Feb 5, 2019 -
High max 7.3USN-2420-1 4 CVEs
linux vulnerabilities
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual Machine) subsystem handles the CR4 control register at VM entry on Intel processors. A local host OS user can exploit this to cause a denial of service (kill arbitrary processes, or system di…
first Nov 25, 2014 -
High max 7.8
linux vulnerabilities
Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges. (CVE-2014-3153) An information leak was discovered in the net…
first Jun 5, 2014 -
High max 7.5
mongodb vulnerability
It was discovered that MongoDB incorrectly handled length parameters in zlib-compressed network messages prior to authentication. An unauthenticated remote attacker could possibly use this issue to cause MongoDB to allocate an oversized memory buffer, resulti…
first Apr 9, 2026 -
High max 7.5USN-8118-1 5 CVEs
rust-sized-chunks vulnerabilities
Yechan Bae discovered that sized-chunks did not properly validate array size when constructing Chunk. An attacker could possibly use these issues to cause out-of-bounds access, leading to memory corruption or undefined behavior. (CVE-2020-25791, CVE-2020-2579…
first Mar 23, 2026 -
High max 8.6USN-8083-1 1 CVE
python-geopandas vulnerability
It was discovered that GeoPandas incorrectly handled certain input. An attacker could possibly use this issue to perform SQL injection attacks.
first Mar 11, 2026 -
High max 7.8USN-8079-1 1 CVE
less vulnerability
It was discovered that less incorrectly handled certain file names. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands.
first Mar 5, 2026 -
High max 8.6USN-7979-1 1 CVE
jaraco.context vulnerability
It was discovered that jaraco.context incorrectly handled certain zip file paths. An attacker could possibly use this issue to extract arbitrary files outside of the intented extraction directory.
first Jan 27, 2026 -
High max 8.4USN-7851-1 3 CVEs
runc-app, runc-stable vulnerabilities
Lei Wang and Li Fubang discovered that runC incorrectly handled masked paths. An attacker could possibly replace a container's /dev/null with a symlink to some other procfs file and possibly escape a container. (CVE-2025-31133) Lei Wang and Li Fubang discover…
first Nov 4, 2025 -
High max 7.3USN-7806-1 1 CVE
pam-u2f vulnerability
It was discovered that PAM/U2F could allow for authentication bypass in some configurations. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.
first Oct 6, 2025 -
High max 7.5USN-7805-1 1 CVE
haproxy vulnerability
Oula Kivalo discovered that HAProxy incorrectly handled parsing certain json numbers. A remote attacker could possibly use this issue to cause HAProxy to crash, resulting in a denial of service.
first Oct 6, 2025 -
High max 7.5USN-7784-1 1 CVE
ruby-rack vulnerability
It was discovered that Rack incorrectly handled limiting the amount of parameters. An attacker could possibly use this issue to bypass the params_limit value, leading to a denial of service.
first Sep 29, 2025 -
High max 7.1USN-7736-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to perform a SQL injection.
first Sep 3, 2025 -
High max 7.5USN-7693-1 1 CVE
node-qs vulnerability
Nathanael Braun and Johan Brissaud discovered that qs was vulnerable to prototype pollution. A remote attacker could possibly use this issue to cause a denial of service.
first Aug 14, 2025 -
High max 7.5USN-7571-1 1 CVE
c3p0 vulnerability
Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application’s XML configuration file could possibly use this issue to cause a denial of service.
first Jun 16, 2025 -
High max 7.5USN-7563-1 1 CVE
dotnet8, dotnet9 vulnerability
It was discovered that .NET did not properly validate search path in Microsoft.NETCore.App.Runtime. An attacker could possibly use this issue to execute arbitrary code.
first Jun 10, 2025 -
High max 7.2USN-7561-1 3 CVEs
amd64-microcode vulnerabilities
It was discovered that AMD Microcode incorrectly handled memory addresses. An attacker with local administrator privilege could possibly use this issue to cause loss of integrity of a confidential guest running under AMD SEV-SNP. (CVE-2023-20584, CVE-2023-313…
first Jun 9, 2025 -
High max 7.8USN-7466-1 4 CVEs
kicad vulnerabilities
It was discovered that KiCad incorrectly handled memory when opening malicious files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands.
first Apr 28, 2025 -
High max 7.5USN-7411-1 1 CVE
openvpn vulnerability
It was discovered that OpenVPN incorrectly handled certain malformed packets. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service.
first Apr 3, 2025 -
High max 8.1USN-7396-1 1 CVE
ovn vulnerability
Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner, and Brian Haley discovered that OVN incorrectly handled certain crafted UDP packets. A remote attacker could possibly use this issue to bypass egress ACL rules.
first Mar 31, 2025 -
High max 7.1USN-7354-1 1 CVE
djoser vulnerability
Diego Cebrián discovered that djoser did not properly handle user authentication. An attacker with valid credentials could possibly use this to bypass authentication checks, such as two-factor authentication, to gain unintended access.
first Mar 17, 2025 -
High max 8.8USN-7210-1 4 CVEs
dotnet8, dotnet9 vulnerabilities
It was discovered that .NET did not properly handle input provided to its Convert.TryToHexString method. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21171) It was discovered that .NET did not properly handle an integer overf…
first Jan 16, 2025 -
High max 8.1USN-7058-1 4 CVEs
dotnet6, dotnet8 vulnerabilities
Brennan Conroy discovered that the .NET Kestrel web server did not properly handle closing HTTP/3 streams under certain circumstances. An attacker could possibly use this issue to achieve remote code execution. This vulnerability only impacted .NET8. (CVE-202…
first Oct 8, 2024 -
High max 8.3USN-6988-2 1 CVE
twisted vulnerability
USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent fix for Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Ben Kallus discover…
first Nov 26, 2024 -
High max 8.8USN-6954-1 3 CVEs
qemu vulnerabilities
Markus Frank and Fiona Ebner discovered that QEMU did not properly handle certain memory operations, leading to a NULL pointer dereference. An authenticated user could potentially use this issue to cause a denial of service. (CVE-2023-6683) Xiao Lei discovere…
first Aug 13, 2024 -
High max 8.0USN-6914-1 1 CVE
ocsinventory-server vulnerability
Filip Hejsek discovered that the phpCAS library included in OCS Inventory was using HTTP headers to determine the service URL used to validate tickets. A remote attacker could possibly use this issue to gain access to a victim's account.
first Jul 24, 2024 -
High max 8.0USN-6913-1 1 CVE
php-cas vulnerability
Filip Hejsek discovered that phpCAS was using HTTP headers to determine the service URL used to validate tickets. A remote attacker could possibly use this issue to gain access to a victim's account on a vulnerable CASified service. This security update intro…
first Jul 24, 2024 -
High max 8.8USN-6912-1 1 CVE
provd vulnerability
James Henstridge discovered that provd incorrectly handled environment variables. A local attacker could possibly use this issue to run arbitrary programs and escalate privileges.
first Jul 24, 2024 -
High max 8.1USN-6889-1 3 CVEs
dotnet6, dotnet8 vulnerabilities
It was discovered that .NET did not properly handle object deserialization. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-30105) Radek Zikmund discovered that .NET did not properly manage memory. An attacker could use this …
first Jul 10, 2024 -
High max 7.5USN-6887-1 1 CVE
openssh vulnerability
Philippos Giavridis, Jacky Wei En Kung, Daniel Hugenroth, and Alastair Beresford discovered that the OpenSSH ObscureKeystrokeTiming feature did not work as expected. A remote attacker could possibly use this issue to determine timing information about keystro…
first Jul 9, 2024 -
High max 8.1USN-6859-1 1 CVE
openssh vulnerability
It was discovered that OpenSSH incorrectly handled signal management. A remote attacker could use this issue to bypass authentication and remotely access systems without proper credentials.
first Jul 1, 2024