2,451 results · Clear filters · Feed
-
High max 7.5USN-3407-1 1 CVE
pyjwt vulnerability
It was discovered that a vulnerability in PyJWT doesn't check invalid_strings properly for some public keys. A remote attacker could take advantage of a key confusion to craft JWTs from scratch.
first Aug 30, 2017 -
High max 7.5USN-3402-1 1 CVE
python-pysaml2 vulnerability
It was discovered that PySAML2 incorrectly handled certain SAML XML requests and responses. A remote attacker could use this issue to read arbitrary files.
first Aug 24, 2017 -
High max 7.5USN-3397-1 1 CVE
strongswan vulnerability
It was discovered that strongSwan incorrectly handled verifying specific RSA signatures. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service.
first Aug 21, 2017 -
High max 7.1USN-3378-2 4 CVEs
linux-lts-xenial vulnerabilities
USN-3378-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Fan Wu and Shixiong Zhao discovered a race con…
first Aug 3, 2017 -
High max 7.1USN-3377-2 4 CVEs
linux-hwe vulnerabilities
USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Fan Wu and Shixiong Zhao discovered a race condition b…
first Aug 3, 2017 -
High max 7.5USN-3301-1 2 CVEs
strongswan vulnerabilities
It was discovered that the strongSwan gmp plugin incorrectly validated RSA public keys. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2017-9022) It was discovered that strongSwan incorrectly parsed…
first May 30, 2017 -
High max 7.6USN-3261-1 37 CVEs
qemu vulnerabilities
Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-1002…
first Apr 20, 2017 -
High max 7.8USN-3230-1 3 CVEs
pillow vulnerabilities
It was discovered that Pillow incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-96…
first Mar 13, 2017 -
High max 8.8USN-3214-1 33 CVEs
w3m vulnerabilities
A large number of security issues were discovered in the w3m browser. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial …
first Mar 2, 2017 -
High max 7.5USN-3195-1 1 CVE
nova-lxd vulnerability
James Page discovered that Nova-LXD incorrectly set up virtual network devices when creating LXD instances. This could result in an unintended firewall configuration.
first Feb 10, 2017 -
High max 7.5USN-3138-1 1 CVE
python-cryptography vulnerability
Markus Döring discovered that python-cryptography incorrectly handled certain HKDF lengths. This could result in python-cryptography returning an empty string instead of the expected derived key.
first Nov 28, 2016 -
High max 7.5USN-3132-1 1 CVE
tar vulnerability
Harry Sintonen discovered that tar incorrectly handled extracting files when path names are specified on the command line. If a user or automated system were tricked into processing a specially crafted archive, an attacker could possibly overwrite arbitrary f…
first Nov 21, 2016 -
High max 7.0
linux-snapdragon vulnerability
It was discovered that a race condition existed in the memory manager of the Linux kernel when handling copy-on-write breakage of private read-only memory mappings. A local attacker could use this to gain administrative privileges.
first Oct 20, 2016 -
High max 7.0
linux-raspi2 vulnerability
It was discovered that a race condition existed in the memory manager of the Linux kernel when handling copy-on-write breakage of private read-only memory mappings. A local attacker could use this to gain administrative privileges.
first Oct 20, 2016 -
High max 7.0
linux-lts-xenial vulnerability
USN-3106-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that a race condition existe…
first Oct 20, 2016 -
High max 7.5USN-3090-2 1 CVE
Pillow regression
USN-3090-1 fixed vulnerabilities in Pillow. The patch to fix CVE-2014-9601 caused a regression which resulted in failures when processing certain png images. This update temporarily reverts the security fix for CVE-2014-9601 pending further investigation. We …
first Sep 30, 2016 -
High max 7.5USN-3090-1 5 CVEs
Pillow vulnerabilities
It was discovered that a flaw in processing a compressed text chunk in a PNG image could cause the image to have a large size when decompressed, potentially leading to a denial of service. (CVE-2014-9601) Andrew Drake discovered that Pillow incorrectly valida…
first Sep 27, 2016 -
High max 7.5USN-3089-1 1 CVE
python-django vulnerability
Sergey Bobrov discovered that Django incorrectly parsed cookies when being used with Google Analytics. A remote attacker could possibly use this issue to set arbitrary cookies leading to a CSRF protection bypass.
first Sep 27, 2016 -
High max 8.1USN-2923-1 1 CVE
bsh vulnerability
Alvaro Muñoz and Christian Schneider discovered that BeanShell incorrectly handled deserialization. A remote attacker could possibly use this issue to execute arbitrary code.
first Mar 8, 2016 -
High max 7.4USN-2915-1 2 CVEs
python-django vulnerabilities
Mark Striemer discovered that Django incorrectly handled user-supplied redirect URLs containing basic authentication credentials. A remote attacker could possibly use this issue to perform a cross-site scripting attack or a malicious redirect. (CVE-2016-2512)…
first Mar 1, 2016 -
High max 7.8USN-2845-1 2 CVEs
sosreport vulnerabilities
Dolev Farhi discovered an information disclosure issue in SoS. If the /etc/fstab file contained passwords, the passwords were included in the SoS report. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-3925) Mateusz Guzik discovered that SoS incorrectly …
first Dec 18, 2015 -
High max 7.4USN-2836-1 1 CVE
grub2 vulnerability
Hector Marco and Ismael Ripoll discovered that GRUB incorrectly handled the backspace key when configured to use authentication. A local attacker could use this issue to bypass GRUB password protection.
first Dec 15, 2015 -
High max 7.4USN-2782-1 1 CVE
apport vulnerability
Gabriel Campana discovered that Apport incorrectly handled Python module imports. A local attacker could use this issue to elevate privileges.
first Oct 27, 2015 -
High max 7.5USN-2720-1 2 CVEs
python-django vulnerability
Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up, resulting in a denial of service.
first Aug 18, 2015 -
High max 7.5USN-2705-1 2 CVEs
python-keystoneclient, python-keystonemiddleware vulnerabilities
Qin Zhao discovered Keystone disabled certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct machine-in-the-middle attacks via a crafted certific…
first Aug 6, 2015 -
High max 7.5USN-2671-1 2 CVEs
python-django vulnerabilities
Eric Peterson and Lin Hua Cheng discovered that Django incorrectly handled session records. A remote attacker could use this issue to cause a denial of service. (CVE-2015-5143) Sjoerd Job Postmus discovered that DJango incorrectly handled newline characters w…
first Jul 9, 2015 -
High max 7.5USN-2539-1 2 CVEs
python-django vulnerabilities
Andrey Babak discovered that Django incorrectly handled strip_tags. A remote attacker could possibly use this issue to cause Django to enter an infinite loop, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2…
first Mar 23, 2015 -
High max 7.5USN-2469-1 4 CVEs
python-django vulnerabilities
Jedediah Smith discovered that Django incorrectly handled underscores in WSGI headers. A remote attacker could possibly use this issue to spoof headers in certain environments. (CVE-2015-0219) Mikko Ohtamaa discovered that Django incorrectly handled user-supp…
first Jan 13, 2015 -
High max 8.8
bash vulnerabilities
Michal Zalewski discovered that Bash incorrectly handled parsing certain function definitions. If an attacker were able to create an environment variable containing a function definition with a very specific name, these issues could possibly be used to bypass…
first Oct 9, 2014 -
High max 7.5USN-2347-1 4 CVEs
python-django vulnerabilities
Florian Apolloner discovered that Django incorrectly validated URLs. A remote attacker could use this issue to conduct phishing attacks. (CVE-2014-0480) David Wilson discovered that Django incorrectly handled file name generation. A remote attacker could use …
first Sep 16, 2014 -
High max 7.5USN-2247-1 6 CVEs
nova vulnerabilities
Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Nova did not properly set up its sudo configuration. If a different flaw was found in OpenStack Nova, this vulnerability could be used to escalate privileges. This issue only affected Ubuntu …
first Jun 17, 2014 -
High max 7.4USN-2212-1 1 CVE
python-django vulnerabilities
Stephen Stewart, Michael Nelson, Natalia Bidart and James Westby discovered that Django improperly removed Vary and Cache-Control headers from HTTP responses when replying to a request from an Internet Explorer or Chrome Frame client. An attacker may use this…
first May 15, 2014 -
High max 7.8USN-7798-1 6 CVEs
linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - SMB network file system; - Packet sockets; - Network traff…
first Oct 2, 2025 -
High max 8.6USN-7672-1 4 CVEs
openjdk-17-crac vulnerabilities
It was discovered that the 2D component of CRaC JDK 17 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) VMashroor Has…
first Jul 28, 2025 -
High max 7.4USN-7531-1 3 CVEs
openjdk-21-crac vulnerabilities
Alicja Kario discovered that the JSSE component of CRaC JDK 21 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of CRaC JDK 21 incorrectl…
first May 26, 2025 -
High max 7.8USN-7611-4 5 CVEs
linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38000, CVE-2025-37890, CVE-20…
first Jul 21, 2025 -
High max 7.4USN-7484-1 3 CVEs
openjdk-24 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 24 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 24 incorrectly …
first May 6, 2025 -
High max 8.4USN-7434-2 1 CVE
perl vulnerability
USN-7434-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could use this issue to cau…
first Apr 23, 2025 -
High max 8.6USN-7669-1 4 CVEs
openjdk-24 vulnerabilities
It was discovered that the 2D component of OpenJDK 24 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) Mashroor Hasan…
first Jul 24, 2025 -
High max 7.8USN-7821-1 4 CVEs
linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Packet sockets; - Network traffic control; - VMware vSockets driver; - XFRM s…
first Oct 14, 2025