8,437 results · Feed
-
Medium max 5.3USN-7275-1 1 CVE
libtasn1-6 vulnerability
Bing Shi discovered that Libtasn1 inefficiently handled certificates. An attacker could possibly use this issue to increase resource utilization leading to a denial of service.
first Feb 18, 2025 -
High max 7.5USN-7272-1 9 CVEs
symfony vulnerabilities
Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this issue to obtain sensitive information and access unauthorized resources. (CVE-2022-24894) Marco Squarcina discovered that Symfony in…
first Feb 18, 2025 -
High max 8.4USN-7271-1 1 CVE
python-virtualenv vulnerability
It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute arbitrary code.
first Feb 18, 2025 -
Medium max 6.3USN-7280-3 2 CVEs
python2.7 regression
USN-7280-2 fixed vulnerabilities in Python. It was discovered that the fixes for CVE-2025-0938 and CVE-2024-11168 were incorrectly applied on Ubuntu 14.04 LTS as a result. This update fixes the problem. We apologize for the inconvenience. Original advisory de…
first Sep 29, 2025 -
High max 8.4USN-7271-2 1 CVE
python-virtualenv vulnerability
USN-7271-1 fixed a vulnerability in virtualenv. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could…
first Feb 25, 2025 -
Medium max 6.2USN-7259-3 1 CVE
eglibc vulnerability
USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could…
first Feb 10, 2025 -
Medium max 5.3USN-7275-2 1 CVE
libtasn1-6 vulnerability
USN-7275-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Bing Shi discovered that Libtasn1 inefficiently handled certificates. An attacker could possibly use this issue to in…
first Feb 20, 2025 -
Critical max 9.8USN-7263-1 11 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Feb 11, 2025 -
Medium max 5.9USN-7256-1 2 CVEs
ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service.
first Feb 6, 2025 -
Medium max 4.8USN-7254-1 1 CVE
openjdk-21 vulnerability
It was discovered that the Hotspot component of OpenJDK 21 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
first Feb 5, 2025 -
Critical max 9.8USN-7260-1 10 CVEs
openrefine vulnerabilities
It was discovered that OpenRefine did not properly handle opening tar files. If a user or application were tricked into opening a crafted tar file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS.…
first Feb 10, 2025 -
Medium max 6.2USN-7259-1 1 CVE
glibc vulnerability
It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Feb 6, 2025 -
High max 7.5USN-7241-1 2 CVEs
bind9 vulnerabilities
Toshifumi Sakaguchi discovered that Bind incorrectly handled many records in the additional section. A remote attacker could possibly use this issue to cause Bind to consume CPU resources, leading to a denial of service. (CVE-2024-11187) Jean-François Billaud…
first Jan 29, 2025 -
Medium max 4.8USN-7253-1 1 CVE
openjdk-17 vulnerability
It was discovered that the Hotspot component of OpenJDK 17 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
first Feb 5, 2025 -
High max 7.5USN-7251-1 1 CVE
harfbuzz vulnerability
It was discovered that HarfBuzz incorrectly handled shaping certain fonts. A remote attacker could possibly use this issue to cause HarfBuzz to consume resources, leading to a denial of service.
first Feb 3, 2025 -
Medium max 6.5USN-7245-1 16 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.41 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. In addition to security fix…
first Jan 30, 2025 -
Medium max 4.8USN-7252-1 1 CVE
openjdk-lts vulnerability
It was discovered that the Hotspot component of OpenJDK 11 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
first Feb 5, 2025 -
Critical max 9.8
cacti vulnerability
It was discovered that Cacti did not properly sanitize the 'poller_id' parameter in the "remote_agent.php" file. A remote attacker could possibly use this issue to achieve remote code execution.
first Jan 23, 2025 -
Medium max 6.3USN-7218-1 1 CVE
python3.10, python3.8 vulnerability
It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
first Jan 20, 2025 -
Medium max 5.8USN-7205-2 1 CVE
python-django vulnerability
USN-7205-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cau…
first Jan 23, 2025 -
High max 7.1USN-7222-1 2 CVEs
bluez vulnerabilities
Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user were tricked into connecting to a malicious Bluetooth device, a remote attacker could possibly use this issue to execute arbitrary code.
first Jan 22, 2025 -
High max 7.5USN-7212-1 3 CVEs
python2.7 vulnerabilities
It was discovered that Python incorrectly handled certain ZIP files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2019-9674) It was discovered that Python incorrectly handled certain i…
first Jan 16, 2025 -
Medium max 5.7USN-7202-1 1 CVE
hplip vulnerability
Kevin Backhouse discovered that HPLIP incorrectly handled certain MDNS responses. A remote attacker could use this issue to cause HPLIP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jan 13, 2025 -
High max 7.0USN-7192-1 1 CVE
xfpt vulnerability
It was discovered that xfpt did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the application to crash or execute arbitrary code.
first Jan 9, 2025 -
Medium max 4.8USN-7216-1 1 CVE
tqdm vulnerability
It was discovered that tqdm did not properly sanitize non-boolean CLI Arguments. A local attacker could possibly use this issue to execute arbitrary code on the host. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-34062)
first Jan 16, 2025 -
Medium max 6.1USN-7193-1 1 CVE
thunderbird vulnerability
Masato Kinugawa discovered that Thunderbird did not properly validate the CSP policy in the Web Compatibility extension. An attacker could potentially exploit this issue to perform a cross-site scripting attack.
first Jan 9, 2025 -
Critical max 9.8USN-7199-1 12 CVEs
libxmltok vulnerabilities
It was discovered that Expat, contained within the xmltok library, incorrectly handled malformed XML data. If a user or application were tricked into opening a crafted XML file, an attacker could cause a denial of service, or possibly execute arbitrary code. …
first Jan 13, 2025 -
Medium max 5.8USN-7205-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cause a denial of service.
first Jan 14, 2025 -
Critical max 9.8USN-7191-1 8 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Jan 9, 2025 -
High max 8.6USN-7175-1 7 CVEs
gst-plugins-base1.0 vulnerabilities
Antonio Morales discovered that GStreamer Base Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Dec 18, 2024 -
UnscoredUSN-7177-1 1 CVE
yara vulnerability
It was discovered that YARA did not properly sanitize its configuration settings. An attacker could potentially exploit this issue to cause a denial of service.
first Dec 18, 2024 -
High max 7.5USN-7180-1 5 CVEs
python2.7 vulnerabilities
It was discovered that Python incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2022-48560) It was discovered that Python did not properly handle XML entity declarations in plist fi…
first Jan 6, 2025 -
High max 8.6USN-7176-1 22 CVEs
gst-plugins-good1.0 vulnerabilities
Antonio Morales discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Dec 18, 2024 -
Critical max 9.8
libspring-java vulnerability
It was discovered that the Spring Framework incorrectly handled web requests via data binding. An attacker could possibly use this issue to achieve remote code execution and obtain sensitive information.
first Dec 17, 2024 -
Low max 3.4USN-7162-1 1 CVE
curl vulnerability
Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations.
first Dec 16, 2024 -
Critical max 10.0USN-7161-3 1 CVE
Docker vulnerability
USN-7161-1 and USN-7161-2 fixed CVE-2024-41110 for source package docker.io in Ubuntu 18.04 LTS and for source package docker.io-app in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. This update fixes it for source package docker.io i…
first Apr 15, 2025 -
Critical max 10.0USN-7161-1 2 CVEs
Docker vulnerabilities
Yair Zak discovered that Docker could unexpectedly forward DNS requests from internal networks in an unexpected manner. An attacker could possibly use this issue to exfiltrate data by encoding information in DNS queries to controlled nameservers. This issue w…
first Dec 16, 2024 -
Critical max 9.8USN-7157-2 1 CVE
php7.4 regression
USN-7157-1 fixed vulnerabilities in PHP. The patch for CVE-2024-8932 caused a regression in php7.4. This update fixes the problem. Original advisory details: It was discovered that PHP incorrectly handled certain inputs when processed with convert.quoted-prin…
first Dec 13, 2024 -
High max 7.5USN-7126-1 3 CVEs
libsoup2.4 vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. (CVE-2024-52530) It was discovered that libsoup did not correctly handle memory w…
first Nov 27, 2024 -
High max 7.3USN-7158-1 3 CVEs
smarty3 vulnerabilities
It was discovered that Smarty incorrectly handled query parameters in requests. An attacker could possibly use this issue to inject arbitrary Javascript code, resulting in denial of service or potential execution of arbitrary code. This issue only affected Ub…
first Dec 12, 2024