2,451 results · Clear filters · Feed
-
High max 7.5USN-5848-1 1 CVE
less vulnerability
David Leadbeater discovered that less was not properly handling escape sequences when displaying raw control characters. A maliciously formed OSC 8 hyperlink could possibly be used by an attacker to cause a denial of service.
first Feb 9, 2023 -
High max 7.5USN-5812-1 1 CVE
python-urllib3 vulnerability
It was discovered that urllib3 incorrectly handled certain characters in URLs. A remote attacker could possibly use this issue to cause urllib3 to consume resources, leading to a denial of service.
first Jan 19, 2023 -
High max 8.4USN-5801-1 2 CVEs
vim vulnerabilities
It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitrary commands. This issue affected only Ubuntu 20.04 and 22.04 (CVE-2022-0392) I…
first Jan 12, 2023 -
High max 7.8USN-5799-1 1 CVE
linux-oem-5.17, linux-oem-6.0 vulnerability
Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
first Jan 11, 2023 -
High max 7.5USN-5798-1 1 CVE
dotnet6 vulnerability
Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint.
first Jan 10, 2023 -
High max 7.5USN-5763-1 4 CVEs
numpy vulnerabilities
It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked into running malicious Python file, an attacker could cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-202…
first Dec 7, 2022 -
High max 7.0USN-5748-1 1 CVE
sysstat vulnerability
It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 29, 2022 -
High max 8.5USN-5686-1 2 CVEs
git vulnerabilities
Cory Snider discovered that Git incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause an unexpected behaviour. (CVE-2022-39253) Kevin Backhouse discovered that Git incorrectly handled certain command strings. An attack…
first Oct 18, 2022 -
High max 7.8USN-5670-1 1 CVE
dotnet6 vulnerability
Edward Thomson discovered that .NET 6 incorrectly handled permissions for local NuGet cache. A local attacker could possibly use this issue to execute arbitrary code.
first Oct 11, 2022 -
High max 7.8USN-5659-1 2 CVEs
kitty vulnerabilities
Stephane Chauveau discovered that kitty incorrectly handled image filenames with special characters in error messages. A remote attacker could possibly use this to execute arbitrary commands. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-35605) Carter …
first Oct 5, 2022 -
High max 7.5USN-5653-1 1 CVE
python-django vulnerability
Benjamin Balder Bach discovered that Django incorrectly handled certain internationalized URLs. A remote attacker could possibly use this issue to cause Django to crash, resulting in a denial of service.
first Oct 4, 2022 -
High max 8.6USN-5641-1 2 CVEs
squid, squid3 vulnerabilities
Mikhail Evdokimov discovered that Squid incorrectly handled cache manager ACLs. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-41317) It was discovere…
first Sep 26, 2022 -
High max 8.4USN-5613-2 7 CVEs
vim regression
USN-5613-1 fixed vulnerabilities in Vim. Unfortunately that update failed to include binary packages for some architectures. This update fixes that regression. We apologize for the inconvenience. Original advisory details: It was discovered that Vim was not p…
first Sep 19, 2022 -
High max 7.5USN-5610-1 1 CVE
rust-regex vulnerability
Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions (regex) it parses. An attacker could possibly use this issue to cause a denial of service.
first Sep 14, 2022 -
High max 7.5USN-5609-1 1 CVE
dotnet6 vulnerability
Graham Esau discovered that .NET 6 incorrectly parsed certain payloads during model binding. An attacker could possibly use this issue to cause a denial of service.
first Sep 13, 2022 -
High max 7.5USN-5551-1 1 CVE
mod-wsgi vulnerability
It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations.
first Aug 4, 2022 -
High max 8.8USN-5549-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled certain FileResponse. An attacker could possibly use this issue to expose sensitive information or gain access over user machine.
first Aug 4, 2022 -
High max 7.4USN-5526-1 1 CVE
pyjwt vulnerability
Aapo Oksman discovered that PyJWT incorrectly handled signatures constructed from SSH public keys. A remote attacker could use this to forge a JWT signature.
first Jul 20, 2022 -
High max 7.3USN-5520-1 1 CVE
libhttp-daemon-perl vulnerability
It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack.
first Jul 14, 2022 -
High max 7.8USN-5511-1 1 CVE
git vulnerabilities
Carlo Marcelo Arenas Belón discovered that an issue related to CVE-2022-24765 still affected Git. An attacker could possibly use this issue to run arbitrary commands as administrator. (CVE-2022-29187)
first Jul 13, 2022 -
High max 8.8USN-5378-1 1 CVE
gzip vulnerability
Cleemy Desu Wayo discovered that Gzip incorrectly handled certain filenames. If a user or automated system were tricked into performing zgrep operations with specially crafted filenames, a remote attacker could overwrite arbitrary files.
first Apr 13, 2022 -
High max 7.5USN-5364-1 1 CVE
waitress vulnerability
It was discovered that Waitress incorrectly handled certain requests. An attacker could possibly use this issue to expose sensitive information.
first Apr 5, 2022 -
High max 7.5USN-5359-1 1 CVE
rsync vulnerability
Danilo Ramos discovered that rsync incorrectly handled memory when performing certain zlib deflating operations. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 31, 2022 -
High max 8.8
chromium-browser vulnerability
It was discovered that Chromium incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.
first Mar 28, 2022 -
High max 7.5USN-5311-2 1 CVE
containerd regression
USN-5311-1 released updates for contained. Unfortunately, a subsequent update reverted the fix for this CVE by mistake. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that containerd allows a…
first May 16, 2022 -
High max 7.5USN-5311-1 1 CVE
containerd vulnerability
It was discovered that containerd allows attackers to gain access to read- only copies of arbitrary files and directories on the host via a specially- crafted image configuration. An attacker could possibly use this issue to obtain sensitive information.
first Mar 3, 2022 -
High max 7.5USN-5293-1 1 CVE
c3p0 vulnerability
Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application's XML configuration file could cause a denial of service.
first Feb 21, 2022 -
High max 8.2USN-5292-2 4 CVEs
snapd vulnerabilities
USN-5292-1 fixed vulnerabilities in snapd. This update provides the corresponding update for the riscv64 architecture. Original advisory details: James Troup discovered that snap did not properly manage the permissions for the snap directories. A local attack…
first Feb 18, 2022 -
High max 8.2USN-5292-1 4 CVEs
snapd vulnerabilities
James Troup discovered that snap did not properly manage the permissions for the snap directories. A local attacker could possibly use this issue to expose sensitive information. (CVE-2021-3155) Ian Johnson discovered that snapd did not properly validate cont…
first Feb 17, 2022 -
High max 7.5USN-5269-1 2 CVEs
python-django vulnerabilities
Keryn Knight discovered that Django incorrectly handled certain template tags. A remote attacker could possibly use this issue to perform a cross-site scripting attack. (CVE-2022-22818) Alan Ryan discovered that Django incorrectly handled file uploads. A remo…
first Feb 3, 2022 -
High max 7.3USN-5247-1 5 CVEs
vim vulnerabilities
It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. This issue only affected Ubu…
first Jan 27, 2022 -
High max 7.7USN-5238-1 1 CVE
libpgjava vulnerability
It was discovered that PostgreSQL JDBC Driver incorrectly handled certain requests from external entities. A remote attacker could use this vulnerability to cause a denial of service or possibly execute arbitrary code.
first Sep 6, 2022 -
High max 8.8USN-5180-1 1 CVE
mailman vulnerability
It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin request CSRF attack and set a new admin password or make other changes.
first Dec 7, 2021 -
High max 7.5USN-5179-1 10 CVEs
busybox vulnerabilities
It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a d…
first Dec 7, 2021 -
High max 7.3USN-5178-1 1 CVE
python-django vulnerability
Sjoerd Job Postmus and TengMA discovered that Django incorrectly handled URLs with trailing newlines. A remote attacker could possibly use this issue to bypass certain access controls.
first Dec 7, 2021 -
High max 7.5USN-5101-1 1 CVE
mongodb vulnerability
It was discovered that MongoDB incorrectly handled certain wire protocol messages. A remote attacker could possibly use this issue to cause MongoDB to crash, resulting in a denial of service.
first Oct 4, 2021 -
High max 8.8USN-5097-1 3 CVEs
ledgersmb vulnerabilities
It was discovered that LedgerSMB incorrectly handled certain inputs. An attacker could use this to leak sensitive information, cause a DoS, or execute arbitrary code. (CVE-2021-3693, CVE-2021-3694, CVE-2021-3731)
first Sep 30, 2021 -
High max 7.8USN-5064-1 1 CVE
cpio vulnerability
Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use this issue to cause cpio to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Sep 8, 2021 -
High max 7.5USN-4975-1 3 CVEs
python-django vulnerabilities
It was discovered that the Django URLValidator function incorrectly handled newlines and tabs. A remote attacker could possibly use this issue to perform a header injection attack. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CV…
first Jun 2, 2021 -
High max 7.3USN-4965-1 11 CVEs
apport vulnerabilities
Maik Münch discovered that Apport incorrectly handled certain information gathering operations. A local attacker could use these issues to read and write arbitrary files as an administrator, and possibly escalate privileges.
first May 25, 2021