2,451 results · Clear filters · Feed
-
High max 7.5USN-6837-1 4 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 23.10. (CVE-2023-27530) It was discover…
first Jun 17, 2024 -
High max 7.5USN-6794-1 4 CVEs
frr vulnerabilities
It was discovered that FRR incorrectly handled certain malformed BGP and OSPF packets. A remote attacker could use this issue to cause FRR to crash, resulting in a denial of service, or possibly execute arbitrary code.
first May 28, 2024 -
High max 7.5USN-6785-1 1 CVE
gnome-remote-desktop vulnerability
Matthias Gerstner discovered that GNOME Remote Desktop incorrectly performed certain user validation checks. A local attacker could possibly use this issue to obtain sensitive information, or take control of remote desktop connections.
first May 23, 2024 -
High max 7.7USN-6772-1 1 CVE
strongswan vulnerability
Jan Schermer discovered that strongSwan incorrectly validated client certificates in certain configurations. A remote attacker could possibly use this issue to bypass access controls.
first May 14, 2024 -
High max 7.5USN-6771-1 1 CVE
sqlparse vulnerability
It was discovered that SQL parse incorrectly handled certain nested lists. An attacker could possibly use this issue to cause a denial of service.
first May 13, 2024 -
High max 7.1USN-6748-1 2 CVEs
ruby-sanitize vulnerabilities
It was discovered that Sanitize incorrectly handled noscript elements under certain circumstances. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-23627) It was dis…
first Apr 24, 2024 -
High max 7.8USN-6697-1 1 CVE
bash vulnerability
It was discovered that Bash incorrectly handled certain memory operations when processing commands. If a user or automated system were tricked into running a specially crafted bash file, a remote attacker could use this issue to cause Bash to crash, resulting…
first Mar 18, 2024 -
High max 7.5USN-6693-1 1 CVE
dotnet7, dotnet8 vulnerability
It was discovered that .NET did not properly handle certain specially crafted requests. An attacker could potentially use this issue to cause a resource leak, leading to a denial of service.
first Mar 12, 2024 -
High max 7.5USN-6683-1 1 CVE
libhtmlcleaner-java vulnerability
It was discovered that HtmlCleaner incorrectly handled certain html documents. An attacker could possibly use this issue to cause a denial of service via application crash.
first Mar 7, 2024 -
High max 7.5USN-6673-3 1 CVE
python-cryptography vulnerability
USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled memory operations when processing mism…
first May 27, 2024 -
High max 7.5USN-6673-1 2 CVEs
python-cryptography vulnerabilities
Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in RSA PKCS#1 v1.5. A remote attacker could possibly use this issue to expose confidential or sensitive information. (CVE…
first Mar 4, 2024 -
High max 7.5USN-6634-1 2 CVEs
dotnet6, dotnet7, dotnet8 vulnerabilities
Brennan Conroy discovered that .NET with SignalR did not properly handle malicious clients. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21386) Bahaa Naamneh discovered that .NET with OpenSSL support did not properly parse…
first Feb 13, 2024 -
High max 7.8USN-6614-1 1 CVE
amanda vulnerability
It was discovered that amanda did not properly check certain arguments. A local unprivileged attacker could possibly use this issue to perform a privilege escalation attack.
first Jan 30, 2024 -
High max 8.6USN-6594-1 3 CVEs
squid vulnerabilities
Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49285) Joshua Rogers discovered that Squid incorrectly handle…
first Jan 23, 2024 -
High max 7.8USN-6576-1 1 CVE
linux-oem-6.1 vulnerability
Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle an expired catchall element in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system cras…
first Jan 10, 2024 -
High max 8.2USN-6530-1 1 CVE
haproxy vulnerability
It was discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain path_end rules.
first Dec 5, 2023 -
High max 7.5USN-6504-1 1 CVE
tracker-miners vulnerability
It was discovered that tracker-miners incorrectly handled sandboxing. If a second security issue was discovered in tracker-miners, an attacker could possibly use this issue in combination with it to escape the sandbox.
first Nov 22, 2023 -
High max 7.5USN-6498-1 4 CVEs
frr vulnerabilities
It was discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service.
first Nov 21, 2023 -
High max 7.6USN-6480-1 2 CVEs
dotnet6, dotnet7, dotnet8 vulnerabilities
Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possibly use this issue to bypass validation, which could trigger unintended actions. (CVE-2023-36558) Piotr Bazydlo discovered …
first Nov 15, 2023 -
High max 7.8
dotnet6, dotnet7 vulnerabilities
USN-6278-1 fixed several vulnerabilities in .NET. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that .NET did properly handle the execution of certain commands. An attacker could possibly use…
first Aug 10, 2023 -
High max 8.1USN-6217-1 1 CVE
dotnet6, dotnet7 vulnerability
McKee-Harris, Matt Cotterell, and Jack Moran discovered that .NET did not properly update account lockout maximum failed attempts. An attacker could possibly use this issue to bypass the security feature and attempt to guess more passwords for an account.
first Jul 11, 2023 -
High max 7.8USN-6196-1 1 CVE
python-reportlab vulnerability
It was discovered that ReportLab incorrectly handled certain PDF files. An attacker could possibly use this issue to execute arbitrary code.
first Jul 3, 2023 -
High max 8.4USN-6195-1 6 CVEs
vim vulnerabilities
It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0128) It was discovered that Vim did not properly manage memory when freeing …
first Jul 3, 2023 -
High max 7.5USN-6161-1 5 CVEs
dotnet6, dotnet7 vulnerabilities
It was discovered that .NET did not properly enforce certain restrictions when deserializing a DataSet or DataTable from XML. An attacker could possibly use this issue to elevate their privileges. (CVE-2023-24936) Kevin Jones discovered that .NET did not prop…
first Jun 13, 2023 -
High max 7.4USN-6116-1 1 CVE
node-hawk vulnerability
It was discovered that hawk incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first May 30, 2023 -
High max 7.5USN-6114-1 1 CVE
node-nth-check vulnerability
Yeting Li discovered that nth-check incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first May 30, 2023 -
High max 7.5USN-6111-1 1 CVE
flask vulnerability
It was discovered that Flask incorrectly handled certain data responses. An attacker could possibly use this issue to expose sensitive information.
first May 29, 2023 -
High max 7.0USN-6088-1 3 CVEs
runc vulnerabilities
It was discovered that runC incorrectly made /sys/fs/cgroup writable when in rootless mode. An attacker could possibly use this issue to escalate privileges. (CVE-2023-25809) It was discovered that runC incorrectly performed access control when mounting /proc…
first May 18, 2023 -
High max 7.5USN-6086-1 1 CVE
node-minimatch vulnerability
It was discovered that minimatch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first May 18, 2023 -
High max 8.8USN-6076-1 7 CVEs
matrix-synapse vulnerabilities
It was discovered that Synapse incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2019-18835, CVE-20…
first May 16, 2023 -
High max 7.5USN-6050-1 3 CVEs
git vulnerabilities
It was discovered that Git incorrectly handled certain commands. An attacker could possibly use this issue to overwriting some paths. (CVE-2023-25652) Maxime Escourbiac and Yassine BENGANA discovered that Git incorrectly handled some gettext machinery. An att…
first May 1, 2023 -
High max 7.5USN-6019-1 1 CVE
python-flask-cors vulnerability
It was discovered that Flask-CORS did not properly escape paths before evaluating resource rules. An attacker could possibly use this to expose sensitive information.
first Apr 13, 2023 -
High max 7.7USN-6018-1 1 CVE
apport vulnerability
Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation vulnerability in apport-cli when viewing crash reports and unprivileged users are allowed to run sudo less. A local attacker on a specially configured system could use this to escalate their pr…
first Apr 13, 2023 -
High max 8.6USN-6016-1 1 CVE
node-thenify vulnerability
It was discovered that thenify incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
first Apr 13, 2023 -
High max 7.5USN-6011-1 2 CVEs
json-smart vulnerabilities
It was discovered that Json-smart incorrectly handled memory when processing input containing unclosed quotes. A remote attacker could possibly use this issue to cause applications using Json-smart to crash, leading to a denial of service. (CVE-2021-31684) It…
first Apr 12, 2023 -
High max 7.8USN-6006-1 1 CVE
dotnet6, dotnet7 vulnerability
It was discovered that .NET did not properly manage dll files. An attacker could potentially use this issue to execute arbitrary code.
first Apr 11, 2023 -
High max 7.5USN-5994-1 1 CVE
haproxy vulnerability
It was discovered that HAProxy incorrectly initialized certain connection buffers. A remote attacker could possibly use this issue to obtain sensitive information.
first Apr 3, 2023 -
High max 8.8USN-5949-1 22 CVEs
chromium-browser vulnerabilities
It was discovered that Chromium could be made to write out of bounds in several components. A remote attacker could possibly use this issue to corrupt memory via a crafted HTML page, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2…
first Mar 13, 2023 -
High max 7.2USN-5908-1 1 CVE
sudo vulnerability
It was discovered that Sudo incorrectly handled the per-command chroot feature. In certain environments where Sudo is configured with a rule that contains a CHROOT setting, a local attacker could use this issue to cause Sudo to crash, resulting in a denial of…
first Mar 2, 2023 -
High max 8.8USN-5881-1 13 CVEs
chromium-browser vulnerabilities
It was discovered that Chromium did not properly manage memory. A remote attacker could possibly use these issues to cause a denial of service or execute arbitrary code via a crafted HTML page. (CVE-2023-0471, CVE-2023-0472, CVE-2023-0473, CVE-2023-0696, CVE-…
first Feb 21, 2023