Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

92 results · Clear filters · Feed

  • Low max 2.1
    USN-7207-1 2 CVEs

    git vulnerabilities

    It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to mislead the user into typing passwords for trusted sites that would then be sent to untrusted sites instead. (CVE-2024-50349)…

    first Jan 14, 2025
  • Low max 3.1
    USN-7143-1 2 CVEs

    rabbitmq-server vulnerabilities

    Christian Rellmann discovered that RabbitMQ Server did not properly sanitize user input when adding a new user via the management UI. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. (CVE-2021-32718) …

    first Dec 9, 2024
  • Low max 3.3
    USN-6553-1 1 CVE

    pydantic vulnerability

    Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial of service via application crash. (CVE-2021-29510)

    first Dec 12, 2023
  • Low max 3.1
    USN-5386-1 1 CVE

    python-aiohttp vulnerability

    Jelmer Vernooij and Beast Glatisant discovered that AIOHTTP incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue to perform phishing attacks.

    first Apr 21, 2022
  • Low max 3.7
    USN-4698-1 8 CVEs

    dnsmasq vulnerabilities

    Moshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly handled memory when sorting RRsets. A remote attacker could use this issue to cause Dnsmasq to hang, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-25681, CVE-20…

    first Jan 19, 2021
  • Low max 3.8
    USN-4664-1 2 CVEs

    aptdaemon vulnerabilities

    Kevin Backhouse discovered that Aptdaemon incorrectly handled certain properties. A local attacker could use this issue to test for the presence of local files. (CVE-2020-16128) Kevin Backhouse discovered that Aptdaemon incorrectly handled permission checks. …

    first Dec 8, 2020
  • Low max 2.3
    USN-3762-2 2 CVEs

    linux-hwe, linux-azure, linux-gcp vulnerabilities

    USN-3762-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. It was discovered that the VirtIO subsystem in…

    first Sep 11, 2018
  • Low max 3.3
    USN-3570-1 1 CVE

    advancecomp vulnerability

    Joonun Jang discovered that AdvanceCOMP incorrectly handled certain malformed zip files. If a user or automated system were tricked into processing a specially crafted zip file, a remote attacker could cause AdvanceCOMP to crash, resulting in a denial of serv…

    first Feb 14, 2018
  • Low max 3.7
    USN-3349-1 16 CVEs

    ntp vulnerabilities

    Yihan Lian discovered that NTP incorrectly handled certain large request data values. A remote attacker could possibly use this issue to cause NTP to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-2519) Miroslav …

    first Jul 5, 2017
  • Low max 2.8
    USN-2816-1 1 CVE

    python-django vulnerability

    Ryan Butterfield discovered that Django incorrectly handled the date template filter. A remote attacker could possibly use this issue to obtain secrets from application settings.

    first Nov 24, 2015
  • Low max 3.3
    USN-7878-2 1 CVE

    cups-filters vulnerabilities

    USN-7878-1 fixed vulnerabilities in cups-filters, This update provides the corresponding update for CVE-2025-64524 for Ubuntu 25.04. Original advisory details: It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remot…

    first Nov 24, 2025
  • Low max 1.8
    USN-7534-1 1 CVE

    flask vulnerability

    It was discovered that Flask incorrectly handled key rotation. An attacker could possibly use this issue to sign sessions with stale keys.

    first May 26, 2025