1,181 results · Clear filters · Feed
-
Medium max 5.7USN-7929-1 1 CVE
usbmuxd vulnerability
It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could possibly use this issue to delete and write files named *.plist in arbitrary locations.
first Dec 15, 2025 -
Medium max 6.2USN-7923-1 1 CVE
qtbase-opensource-src vulnerability
It was discovered that Qt did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Dec 11, 2025 -
Medium max 5.9USN-7908-1 2 CVEs
postgresql-14, postgresql-16, postgresql-17 vulnerabilities
Jelte Fennema-Nio discovered that the PostgreSQL CREATE STATISTICS command did not correctly check for schema CREATE privileges. An authenticated attacker could possibly use this issue to create a denial of service against other CREATE STATISTICS users. (CVE-…
first Dec 3, 2025 -
Medium max 4.7USN-7905-1 1 CVE
kdeconnect vulnerability
It was discovered that KDE Connect incorrectly handled device IDs. An attacker could possibly use this issue to bypass authentication and connect an unpaired device.
first Dec 3, 2025 -
Medium max 5.3USN-7871-1 1 CVE
ffmpeg vulnerability
It was discovered that FFmpeg incorrectly handled memory allocation in the ALS audio decoder. If a user was tricked into loading a crafted media file, a remote attacker could possibly use this issue to make FFmpeg crash, resulting in a denial of service.
first Nov 16, 2025 -
Medium max 5.5USN-7873-1 8 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4…
first Nov 19, 2025 -
Medium max 5.7USN-7855-2 1 CVE
unbound regression
USN-7855-1 fixed vulnerabilities in Unbound. It was discovered that the fix for CVE-2025-11411 was incomplete. This update fixes the problem. Original advisory details: Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Unbound incorrectly ha…
first Dec 2, 2025 -
Medium max 4.3USN-7886-2 2 CVEs
python3.13 vulnerabilities
USN-7886-1 fixed vulnerabilities in Python. This update provides the corresponding updates for python3.13 in Ubuntu 25.04 and Ubuntu 25.10. Original advisory details: It was discovered that Python inefficiently handled expanding system environment variables. …
first Nov 26, 2025 -
Medium max 5.5USN-7843-1 1 CVE
netty vulnerability
It was discovered that Netty did not properly handle user input. A remote attacker could possibly use this issue to forge arbitrary emails from a trusted server.
first Oct 28, 2025 -
Medium max 5.5USN-7842-1 1 CVE
radare2 vulnerability
It was discovered that Radare2 conntained a memory leak, resulting in performance degradation. An attacker could possibly use this issue to cause Radare2 to crash, resulting in a denial of service. (CVE-2025-60358)
first Oct 27, 2025 -
Medium max 5.7USN-7855-1 1 CVE
unbound vulnerability
Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Unbound incorrectly handled certain promiscuous NS RRSets. A remote attacker could possibly use this issue to perform a domain hijack attack.
first Nov 4, 2025 -
Medium max 5.9USN-7838-1 1 CVE
fetchmail vulnerability
It was discovered that the fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this issue to cause fetchmail to crash, resulting in a denial of service.
first Oct 23, 2025 -
Medium max 5.9USN-8038-1 1 CVE
nginx vulnerability
It was discovered that nginx incorrectly handled proxying to upstream TLS servers. An attacker could possibly use this issue to insert plain text data into the response from an upstream proxied server.
first Feb 12, 2026 -
Medium max 6.5USN-7816-1 1 CVE
dpdk vulnerability
It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could possibly use this issue to obtain sensitive information, or cause the network interface to crash, resulting in a denial of service.
first Oct 9, 2025 -
Medium max 6.3USN-7772-1 1 CVE
python-eventlet vulnerability
It was discovered that Eventlet incorrectly handled certain requests. An attacker could possibly use this issue to bypass front-end security controls, launch targeted attacks against active site users, and poison web caches.
first Sep 24, 2025 -
Medium max 5.9USN-7760-1 1 CVE
glibc vulnerability
It was discovered that the GNU C Library incorrectly handled the regcomp function when memory allocation failures occured. An attacker could use this issue to cause applications to crash, leading to a denial of service, or possibly execute arbitrary code.
first Sep 22, 2025 -
Medium max 6.6USN-7757-1 2 CVEs
openjpeg2 vulnerabilities
It was discovered that OpenJPEG did not properly handle memory when decompressing certain image files. An attacker could possibly use this issue to cause OpenJPEG to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20…
first Sep 18, 2025 -
Medium max 5.5USN-7519-1 4 CVEs
mariadb-10.6 vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
first May 20, 2025 -
Medium max 5.5USN-7548-1 5 CVEs
mariadb vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
first Jun 2, 2025 -
Medium max 6.9USN-7528-1 3 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled the concat_ws() function. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, and Ubuntu …
first May 22, 2025 -
Medium max 6.6USN-7587-1 6 CVEs
fig2dev vulnerabilities
Suhwan Song discovered that Fig2dev did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only a…
first Jun 23, 2025 -
Medium max 5.3USN-7747-1 1 CVE
rubygems vulnerability
It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause RubyGems to consume resources, leading to a regular expression denial of service (ReDoS).
first Sep 15, 2025 -
Medium max 5.6USN-7749-1 1 CVE
libcpanel-json-xs-perl vulnerability
It was discovered that Cpanel-JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause Cpanel-JSON-XS to crash, resulting in a denial of service.
first Sep 15, 2025 -
Medium max 5.9USN-7732-1 1 CVE
kmail-account-wizard vulnerability
It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this issue to cause email clients to use an attacker-controlled email server.
first Sep 2, 2025 -
Medium max 6.5USN-7709-1 1 CVE
ruby-webrick vulnerability
It was discovered that WEBrick incorrectly parsed HTTP headers. In configurations where WEBrick is placed behind an HTTP proxy, a remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack.
first Aug 21, 2025 -
Medium max 6.5USN-7691-2 24 CVEs
mysql-8.0 vulnerabilities
USN-7691-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 6, 2025 -
Medium max 6.5USN-7691-1 24 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.43 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 has been updated to MySQL 8.4.6. In addition to…
first Aug 13, 2025 -
Medium max 4.8USN-7700-1 1 CVE
gcc-10, gcc-11, gcc-12 vulnerability
It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using C99 variable length arrays or alloca. As a result, an attacker who was able to trigger a b…
first Aug 19, 2025 -
Medium max 5.9USN-7678-1 1 CVE
perl vulnerability
It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or access files from unexpected locations.
first Jul 29, 2025 -
Medium max 6.5USN-7670-1 2 CVEs
iputils vulnerability
It was discovered that the iputils ping utility incorrectly handled certain ICMP Echo Reply packets. A remote attacker could possibly use this issue to cause iputils to consume resources, leading to a denial of service.
first Jul 24, 2025 -
Medium max 4.8USN-7656-1 2 CVEs
erlang vulnerabilities
It was discovered that Erlang OTP’s SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to intercept communications could possibly use this issue to insert optional messages into connections during the handshake. (C…
first Jul 21, 2025 -
Medium max 5.9USN-7648-1 3 CVEs
php8.1, php8.3, php8.4 vulnerabilities
It was discovered that PHP incorrectly handled certain hostnames containing null characters. A remote attacker could possibly use this issue to bypass certain hostname validation checks. (CVE-2025-1220) It was discovered that PHP incorrectly handled the pgsql…
first Jul 17, 2025 -
Medium max 6.5USN-7635-1 4 CVEs
gnutls28 vulnerabilities
It was discovered that GnuTLS incorrectly handled exporting Subject Alternative Name (SAN) entries containing an otherName. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. …
first Jul 14, 2025 -
Medium max 6.5USN-7612-1 5 CVEs
python-flask-cors vulnerabilities
It was discovered that Flask-CORS did not correctly handle certain regular expressions. A remote attacker could possibly use this issue to leak sensitive information or bypass authentication mechanisms. (CVE-2024-6839) It was discovered that Flask-CORS allowe…
first Jul 2, 2025 -
Medium max 6.8USN-7574-1 5 CVEs
golang-1.22 vulnerabilities
Kyle Seely discovered that the Go net/http module did not properly handle sensitive headers during repeated redirects. An attacker could possibly use this issue to obtain sensitive information. (CVE-2024-45336) Juho Forsén discovered that the Go crypto/x509 m…
first Jun 18, 2025 -
Medium max 5.9USN-7570-1 2 CVEs
python3.13, python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6 vulnerabilities
It was discovered that Python incorrectly handled certain unicode characters during decoding. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-4516) It was discovered that Python incorrectly handled unicode encoding of email h…
first Jun 16, 2025 -
Medium max 6.5USN-7572-1 4 CVEs
node-katex vulnerabilities
Juho Forsén discovered that KaTeX did not correctly handle certain inputs, which could lead to an infinite loop. If a user or application were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of servic…
first Jun 17, 2025 -
Medium max 4.0USN-7555-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log injection.
first Jun 4, 2025 -
Medium max 6.5USN-7418-1 8 CVEs
ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities
It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affec…
first Apr 7, 2025 -
Medium max 4.3USN-7433-1 1 CVE
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick did not properly limit image dimensions, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-27795) It was discovered that GraphicsMagick did…
first Apr 14, 2025