8,437 results · Feed
-
High max 7.3USN-7846-1 3 CVEs
xorg-server, xwayland vulnerabilities
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary co…
first Oct 29, 2025 -
High max 8.6USN-7836-2 3 CVEs
bind9 vulnerabilities
USN-7836-1 fixed vulnerabilities in Bind. This update provides the corresponding fixes for Ubuntu 20.04 LTS. Original advisory details: Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could po…
first Nov 12, 2025 -
High max 8.6USN-7836-1 3 CVEs
bind9 vulnerabilities
Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. (CVE-2025-8677) Yuxiao Wu, Yunyi Zhang, Baoj…
first Oct 22, 2025 -
Medium max 5.9USN-8038-1 1 CVE
nginx vulnerability
It was discovered that nginx incorrectly handled proxying to upstream TLS servers. An attacker could possibly use this issue to insert plain text data into the response from an upstream proxied server.
first Feb 12, 2026 -
High max 7.5USN-7830-1 5 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg incorrectly handled the return values of functions in its Firequalizer filter and in the HTTP Live Streaming (HLS) implementation, leading to a NULL pointer dereference. If a user was tricked into loading a crafted media file, a …
first Oct 21, 2025 -
Critical max 9.9USN-7822-1 3 CVEs
dotnet8, dotnet9, dotnet10 vulnerabilities
It was discovered that .NET did not properly handle the creation of temporary build time directories. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-55247) It was discovered that .NET did not properly establish TLS sessions …
first Oct 16, 2025 -
Critical max 10.0USN-7824-3 1 CVE
redis vulnerability
USN-7824-1 fixed several vulnerabilities in Redis. This update provides the corresponding update for Ubuntu 22.04 LTS. Original advisory details: Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Redis incorrectly handled memory when running Lua scrip…
first Oct 16, 2025 -
Low max 3.1USN-7818-2 1 CVE
subversion vulnerability
USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Original advisory details: It was discovered that Apache Subversion incorrectl…
first Oct 16, 2025 -
Critical max 10.0USN-7824-2 1 CVE
redict vulnerability
USN-7824-1 fixed several vulnerabilities in Redis. This update provides the corresponding update for Redict - a fork of Redis. Original advisory details: Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Redis incorrectly handled memory when running L…
first Oct 16, 2025 -
Critical max 9.8USN-7813-1 6 CVEs
fort-validator vulnerabilities
Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI repository data. A remote attacker could possibly use this issue to cause FORT Validator to crash, resulting in a denial of servic…
first Oct 8, 2025 -
Medium max 6.5USN-7816-1 1 CVE
dpdk vulnerability
It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could possibly use this issue to obtain sensitive information, or cause the network interface to crash, resulting in a denial of service.
first Oct 9, 2025 -
Low max 2.9USN-7803-1 1 CVE
poppler vulnerability
It was discovered that poppler incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to crash, leading to a denial of service.
first Oct 6, 2025 -
Medium max 6.3USN-7772-1 1 CVE
python-eventlet vulnerability
It was discovered that Eventlet incorrectly handled certain requests. An attacker could possibly use this issue to bypass front-end security controls, launch targeted attacks against active site users, and poison web caches.
first Sep 24, 2025 -
Medium max 5.9USN-7760-1 1 CVE
glibc vulnerability
It was discovered that the GNU C Library incorrectly handled the regcomp function when memory allocation failures occured. An attacker could use this issue to cause applications to crash, leading to a denial of service, or possibly execute arbitrary code.
first Sep 22, 2025 -
High max 8.2USN-7768-1 1 CVE
dpkg vulnerability
It was discovered that dpkg incorrectly handled removing certain temporary directories. An attacker could possibly use this issue to consume disk space, leading to a denial of service.
first Sep 24, 2025 -
Medium max 6.6USN-7757-1 2 CVEs
openjpeg2 vulnerabilities
It was discovered that OpenJPEG did not properly handle memory when decompressing certain image files. An attacker could possibly use this issue to cause OpenJPEG to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20…
first Sep 18, 2025 -
Critical max 9.8USN-7615-1 2 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled scanning UDF files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2025-20234) It was discovered that ClamAV incorrectly handled scanning PDF f…
first Jul 2, 2025 -
Medium max 5.5USN-7519-1 4 CVEs
mariadb-10.6 vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
first May 20, 2025 -
Critical max 9.8USN-7663-1 52 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…
first Jul 22, 2025 -
Critical max 9.8USN-7615-2 2 CVEs
clamav vulnerabilities
USN-7615-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled scanning UDF files. A remote attacker could possibly use this …
first Jul 7, 2025 -
Medium max 5.5USN-7548-1 5 CVEs
mariadb vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
first Jun 2, 2025 -
Medium max 6.9USN-7528-1 3 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled the concat_ws() function. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, and Ubuntu …
first May 22, 2025 -
High max 8.2USN-7659-1 3 CVEs
ruby-nokogiri vulnerabilities
It was discovered Nokogiri did not correctly parse XML Schemas. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (…
first Jul 21, 2025 -
Medium max 6.6USN-7587-1 6 CVEs
fig2dev vulnerabilities
Suhwan Song discovered that Fig2dev did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only a…
first Jun 23, 2025 -
High max 7.5USN-7750-1 1 CVE
libjson-xs-perl vulnerability
It was discovered that JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause JSON-XS to crash, resulting in a denial of service.
first Sep 15, 2025 -
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Aug 19, 2025 -
Critical max 9.1USN-7639-1 7 CVEs
apache2 vulnerabilities
It was discovered that the Apache HTTP Server incorrectly handled certain Content-Type response headers. A remote attacker could possibly use this issue to perform HTTP response splitting attacks. (CVE-2024-42516) xiaojunjie discovered that the Apache HTTP Se…
first Jul 16, 2025 -
Medium max 5.3USN-7747-1 1 CVE
rubygems vulnerability
It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause RubyGems to consume resources, leading to a regular expression denial of service (ReDoS).
first Sep 15, 2025 -
Medium max 5.6USN-7749-1 1 CVE
libcpanel-json-xs-perl vulnerability
It was discovered that Cpanel-JSON-XS incorrectly handled parsing certain JSON data. An attacker could possibly use this issue to cause Cpanel-JSON-XS to crash, resulting in a denial of service.
first Sep 15, 2025 -
High max 8.8USN-7741-1 3 CVEs
postgresql-14, postgresql-16, postgresql-17 vulnerabilities
Dean Rasheed discovered that PostgreSQL incorrectly handled access control lists. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-8713) Martin Rakhmanov, Matthieu Denais, and RyotaK discovered that the PostgreSQL pg_dump u…
first Sep 8, 2025 -
Critical max 9.8USN-7734-1 4 CVEs
ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities
It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this issue to cause Ruby to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS. (C…
first Sep 3, 2025 -
Medium max 5.9USN-7732-1 1 CVE
kmail-account-wizard vulnerability
It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this issue to cause email clients to use an attacker-controlled email server.
first Sep 2, 2025 -
High max 7.5USN-7735-1 2 CVEs
rubygems vulnerabilities
It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could use this issue to cause RubyGems to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-28755) It was discovered that …
first Sep 3, 2025 -
Low max 3.7USN-7715-1 1 CVE
nginx vulnerability
It was discovered that the nginx ngx_mail_smtp_module module incorrectly handled certain memory operations when doing SMTP authentication. This could possibly result in sensitive information being sent to the authentication server.
first Aug 25, 2025 -
Critical max 9.8USN-7705-1 6 CVEs
tomcat10 vulnerabilities
It was discovered that Tomcat did not correctly handle case sensitivity. An attacker could possibly use this issue to bypass authentication mechanisms. (CVE-2025-46701) Elysee Franchuk discovered that Tomcat did not correctly limit the number of attributes fo…
first Aug 20, 2025 -
Medium max 6.5USN-7709-1 1 CVE
ruby-webrick vulnerability
It was discovered that WEBrick incorrectly parsed HTTP headers. In configurations where WEBrick is placed behind an HTTP proxy, a remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack.
first Aug 21, 2025 -
High max 8.6USN-7690-1 4 CVEs
openjdk-17 vulnerabilities
It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) VMashroor Hasa…
first Aug 11, 2025 -
Medium max 6.5USN-7691-2 24 CVEs
mysql-8.0 vulnerabilities
USN-7691-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 6, 2025 -
Medium max 6.5USN-7691-1 24 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.43 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 has been updated to MySQL 8.4.6. In addition to…
first Aug 13, 2025 -
Medium max 4.8USN-7700-1 1 CVE
gcc-10, gcc-11, gcc-12 vulnerability
It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using C99 variable length arrays or alloca. As a result, an attacker who was able to trigger a b…
first Aug 19, 2025