8,437 results · Feed
-
Medium max 6.6USN-7537-1 1 CVE
net-tools vulnerability
It was discovered that net-tools incorrectly handled certain inputs. An attacker could possible use this issue to cause a crash or execute arbitrary code.
first May 27, 2025 -
Medium max 4.8USN-7532-1 1 CVE
glib2.0 vulnerability
It was discovered that Glib incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first May 26, 2025 -
Medium max 5.5USN-7529-1 5 CVEs
tika vulnerabilities
It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-1950, CVE-2020-1951) It …
first May 23, 2025 -
High max 7.5USN-7695-1 2 CVEs
ruby-sidekiq vulnerabilities
Anas Roubi discovered that Sidekiq did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-30151) It was di…
first Aug 14, 2025 -
Critical max 10.0
Tomcat vulnerability
USN-7525-1 fixed CVE-2025-24813 for tomcat9 in Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. This update fixes it for tomcat9 in Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.10. These versions include only the tomcat library (libtomcat9-java) and…
first May 26, 2025 -
Medium max 5.9USN-7520-1 1 CVE
postgresql-12, postgresql-14, postgresql-16 vulnerability
It was discovered that PostgreSQL incorrectly handled the GB18030 encoding. An attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service.
first May 20, 2025 -
Medium max 5.9USN-7505-1 1 CVE
abseil vulnerability
It was discovered that Abseil incorrectly handled memory with the upper bound of the size argument. An attacker could possibly use this issue to cause a denial of service or memory corruption.
first May 12, 2025 -
High max 7.5USN-7692-1 11 CVEs
request-tracker5 vulnerabilities
It was discovered that Request Tracker was susceptible to timing attacks. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-38562) It was discovered that Request Tracker was suscept…
first Aug 13, 2025 -
High max 8.0USN-7509-1 1 CVE
dotnet8, dotnet9 vulnerability
It was discovered that .NET did not properly handle file names and paths under certain conditions. An attacker could possibly use this issue to perform spoofing over a network.
first May 16, 2025 -
Medium max 5.3USN-7501-1 1 CVE
python-django vulnerability
Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first May 7, 2025 -
Medium max 5.3USN-7501-2 1 CVE
python-django vulnerability
USN-7501-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote a…
first May 7, 2025 -
High max 7.4USN-7497-1 2 CVEs
ruby-carrierwave vulnerabilities
Rikita Ishikawa discovered that CarrierWave did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-21305) Norihide Saito discove…
first May 7, 2025 -
High max 7.4USN-7483-1 3 CVEs
openjdk-21 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 21 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 21 incorrectly …
first May 6, 2025 -
Critical max 9.3USN-7486-1 1 CVE
libfcgi vulnerability
It was discovered that FastCGI incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first May 6, 2025 -
High max 7.4USN-7481-1 3 CVEs
openjdk-lts vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 11 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 11 incorrectly …
first May 6, 2025 -
Critical max 10.0USN-7474-1 7 CVEs
docker.io vulnerabilities
Cory Snider discovered that Docker incorrectly handled networking packet encapsulation. An attacker could use this issue to inject internet packets in established connection, possibly causing a denial of service or bypassing firewall protections. This issue o…
first May 1, 2025 -
Critical max 9.0USN-7478-1 1 CVE
corosync vulnerability
It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled, or an attacker knows the encryption key, this issue could be used to cause Corosync to crash, resulting in a denial of service.
first May 5, 2025 -
Medium max 6.5USN-7479-1 27 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.42 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. Ubuntu 25.04 has been updat…
first May 5, 2025 -
High max 7.4USN-7482-1 3 CVEs
openjdk-17 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 17 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 17 incorrectly …
first May 6, 2025 -
Critical max 9.0USN-7490-3 9 CVEs
libsoup3 vulnerabilities
USN-7490-1 fixed vulnerabilities in libsoup2.4. This update provides the corresponding updates for libsoup3. Original advisory details: Tan Wei Chong discovered that libsoup incorrectly handled memory when parsing HTTP request headers. An attacker could possi…
first May 7, 2025 -
High max 7.5
nodejs vulnerability
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for Node.js. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An…
first Apr 29, 2025 -
High max 7.3USN-7472-1 3 CVEs
micropython vulnerabilities
Junwha Hong and Wonil Jang discovered that Micropython incorrectly handled the length of a buffer in mp_vfs_umount, leading to a heap-based buffer overflow vulnerability. If a user or automated system were tricked into opening a specially crafted file, an att…
first May 1, 2025 -
High max 7.5
h2o vulnerability
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for H2O. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An att…
first Apr 30, 2025 -
Medium max 5.3USN-7464-1 1 CVE
jupyter-notebook vulnerability
It was discovered that Jupyter Notebook did not properly parse HTML comments under certain circumstances. An attacker could possibly use this issue to cause a regular expression denial of service (ReDoS).
first Apr 28, 2025 -
Medium max 4.3USN-7457-1 1 CVE
openssh vulnerability
It was discovered that OpenSSH incorrectly handled the DisableForwarding directive. The directive would fail to disable X11 and agent forwarding, contrary to documentation and expectations.
first Apr 24, 2025 -
High max 8.6USN-7456-1 2 CVEs
php-twig vulnerabilities
Fabien Potencier discovered that Twig did not run sandbox security checks in some circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 L…
first Apr 24, 2025 -
High max 7.4USN-7447-1 1 CVE
yelp, yelp-xsl vulnerability
It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious downloaded help files and exfiltrate sensitive information.
first Apr 23, 2025 -
High max 7.8USN-7437-1 2 CVEs
cimg vulnerabilities
It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1325) It was discovered that th…
first Apr 15, 2025 -
High max 8.2USN-7446-1 1 CVE
libapache2-mod-auth-openidc vulnerability
It was discovered that mod_auth_openidc incorrectly handled certain POST requests. An attacker could possibly use this issue to obtain sensitive information.
first Apr 23, 2025 -
High max 7.5USN-7439-1 3 CVEs
quickjs vulnerabilities
It was discovered that QuickJS could be forced to reference uninitialized memory in certain instances. An attacker could possibly use this issue to cause QuickJS to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2023-48183) It was di…
first Apr 15, 2025 -
UnscoredUSN-7440-1 1 CVE
imagemagick regression
USN-6200-2 fixed a vulnerability in ImageMagick. It was discovered that the fix for CVE-2023-34151 was incomplete. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly han…
first Apr 16, 2025 -
High max 7.5
tomcat8 vulnerability
USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for Apache Tomcat. Original advisory details: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protoc…
first Apr 28, 2025 -
High max 8.4USN-7438-1 2 CVEs
7zip vulnerabilities
Igor Pavlov discovered that 7-Zip had several memory-related issues. An attacker could possibly use these issues to cause 7-Zip to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2023-52168, CVE-2023-52169)
first Apr 15, 2025 -
High max 7.0USN-7432-1 5 CVEs
libsoup2.4, libsoup3 vulnerabilities
It was discovered that libsoup could be made to read out of bounds. An attacker could possibly use this issue to cause applications using libsoup to crash, resulting in a denial of service. (CVE-2025-2784, CVE-2025-32050, CVE-2025-32052, CVE-2025-32053) It wa…
first Apr 10, 2025 -
High max 7.5USN-7424-1 1 CVE
expat vulnerability
It was discovered that Expat could crash due to stack overflow when processing XML documents with deeply nested entity references. If a user or automated system were tricked into processing specially crafted XML input, an attacker could use this issue to caus…
first Apr 8, 2025 -
Medium max 5.3USN-7430-1 1 CVE
dino-im vulnerability
Kim Alvefur discovered that Dino did not correctly sanitize certain messages. A remote attacker could possibly use this issue to leak sensitive information.
first Apr 9, 2025 -
High max 7.5USN-7425-1 1 CVE
erlang vulnerability
It was discovered that Erlang OTP's SSH module did not limit the size of certain data in initialization messages. An attacker could possibly use this issue to consume large amount of memory leading to a denial of service.
first Apr 8, 2025 -
High max 7.5
tomcat9 vulnerability
It was discovered that Tomcat incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause tomcat9 to consume resources, leading to a denial of service.
first Apr 7, 2025 -
High max 7.5
trafficserver vulnerability
It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to cause Apache Traffic Server to crash, resulting in a denial of service.
first Apr 28, 2025 -
Critical max 9.2USN-7400-1 6 CVEs
php7.4, php8.1, php8.3 vulnerabilities
It was discovered that PHP incorrectly handle certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2024-11235) It was discovered that PHP incorrectly handle certain folded headers. An attacker could possib…
first Mar 31, 2025