8,464 results · Feed
-
High max 7.5USN-7571-1 1 CVE
c3p0 vulnerability
Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application’s XML configuration file could possibly use this issue to cause a denial of service.
first Jun 16, 2025 -
High max 7.5USN-7563-1 1 CVE
dotnet8, dotnet9 vulnerability
It was discovered that .NET did not properly validate search path in Microsoft.NETCore.App.Runtime. An attacker could possibly use this issue to execute arbitrary code.
first Jun 10, 2025 -
High max 7.2USN-7561-1 3 CVEs
amd64-microcode vulnerabilities
It was discovered that AMD Microcode incorrectly handled memory addresses. An attacker with local administrator privilege could possibly use this issue to cause loss of integrity of a confidential guest running under AMD SEV-SNP. (CVE-2023-20584, CVE-2023-313…
first Jun 9, 2025 -
UnscoredUSN-7555-3 0 CVEs
python-django vulnerability
USN-7555-1 fixed a vulnerability in Django. This update provides an additional fix for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to…
first Jun 17, 2025 -
UnscoredUSN-7555-2 0 CVEs
python-django vulnerability
USN-7555-1 fixed vulnerabilities in Django. The fix was incomplete. This update applies an additional patch to fix it properly. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could pos…
first Jun 16, 2025 -
UnscoredUSN-7537-2 0 CVEs
net-tools regression
USN-7537-1 fixed a vulnerability in net-tools that caused a regression. This update fixes the problem. Original advisory details: It was discovered that net-tools incorrectly handled certain inputs. An attacker could possible use this issue to cause a crash o…
first May 28, 2025 -
UnscoredUSN-7536-2 0 CVEs
cifs-utils regression
USN-7536-1 fixed vulnerabilities in cifs-utils. This update introduced a regression in certain environments. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that cifs-utils incorrectly handled na…
first Jun 16, 2025 -
Critical max 9.1USN-7503-1 1 CVE
python-h11 vulnerability
Jeppe Bonde Weikop discovered that h11 incorrectly handled crafted HTTP requests. A remote attacker could possibly use this issue to smuggle malicious HTTP requests, which could potentially lead to security control bypass and information leakage.
first May 8, 2025 -
Medium max 5.5USN-7499-1 2 CVEs
linux-azure, linux-azure-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Microsoft Azure Network Adapter (MANA) driver; - Timer subsystem; (CVE-2025-2…
first May 7, 2025 -
Medium max 5.5USN-7493-1 1 CVE
linux-raspi vulnerabilities
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; (CVE-2024-58081)
first May 6, 2025 -
UnscoredUSN-7491-1 2 CVEs
linux-oem-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Type-C Connector System Software Interface driver; - Timer subsystem; (CV…
first May 6, 2025 -
UnscoredUSN-7489-1 1 CVE
linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle, linux-raspi vulnerability
One security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Timer subsystem; (CVE-2025-21813)
first May 6, 2025 -
High max 7.8USN-7466-1 4 CVEs
kicad vulnerabilities
It was discovered that KiCad incorrectly handled memory when opening malicious files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary commands.
first Apr 28, 2025 -
Medium max 6.8USN-7431-1 1 CVE
haproxy vulnerability
Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon configurations that replace multiple short patterns with a longer one. A remote attacker could use this issue to cause HAProxy to crash, resulting in a denial …
first Apr 10, 2025 -
UnscoredUSN-7417-1 4 CVEs
libdbd-mysql-perl vulnerabilities
It was discovered that libdbd-mysql-perl did not correctly handle certain SQL queries. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-1249) It was discovered that libdbd-mysql-perl did not correctly handle certain memory ope…
first Apr 7, 2025 -
UnscoredUSN-7412-2 0 CVEs
gnupg2 regression
USN-7412-1 fixed vulnerabilities in GnuPG. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that GnuPG incorrectly handled importing keys with certain crafted s…
first Jul 8, 2025 -
Low max 2.7USN-7412-1 1 CVE
gnupg2 vulnerability
It was discovered that GnuPG incorrectly handled importing keys with certain crafted subkey data. If a user or automated system were tricked into importing a specially crafted key, a remote attacker may prevent users from importing other keys in the future.
first Apr 3, 2025 -
High max 7.5USN-7411-1 1 CVE
openvpn vulnerability
It was discovered that OpenVPN incorrectly handled certain malformed packets. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service.
first Apr 3, 2025 -
Medium max 6.1USN-7399-1 1 CVE
rabbitmq-server vulnerability
It was discovered that RabbitMQ Server's management UI did not sanitize certain input. An attacker could possibly use this issue to inject code by performing a cross-site scripting (XSS) attack.
first Mar 31, 2025 -
High max 8.1USN-7396-1 1 CVE
ovn vulnerability
Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner, and Brian Haley discovered that OVN incorrectly handled certain crafted UDP packets. A remote attacker could possibly use this issue to bypass egress ACL rules.
first Mar 31, 2025 -
High max 7.1USN-7354-1 1 CVE
djoser vulnerability
Diego Cebrián discovered that djoser did not properly handle user authentication. An attacker with valid credentials could possibly use this to bypass authentication checks, such as two-factor authentication, to gain unintended access.
first Mar 17, 2025 -
UnscoredUSN-7343-2 0 CVEs
jinja2 regression
USN-7343-1 fixed vulnerabilities in Jinja2. The update introduced a regression when attempting to import Jinja2 on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Rafal Krupi…
first Mar 12, 2025 -
UnscoredUSN-7336-1 1 CVE
gnuchess vulnerability
Michael Vaughan discovered an overflow vulnerability in GNU Chess that occurs when reading a specially crafted Portable Game Notation (PGN) file. An attacker could possibly use this issue to cause GNU Chess to crash, resulting in a denial of service, or the e…
first Mar 6, 2025 -
Medium max 6.5USN-7269-2 3 CVEs
intel-microcode vulnerabilities
USN-7269-1 fixed vulnerabilities in Intel Microcode. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finit…
first Feb 24, 2025 -
Critical max 10.0
activemq vulnerabilities
It was discovered that Apache ActiveMQ incorrectly handled authentication. A remote attacker could possibly use this issue to run arbitrary code. (CVE-2022-41678) It was discovered that Apache ActiveMQ incorrectly handled deserialization. A remote attacker co…
first Feb 14, 2025 -
Medium max 4.2USN-7261-2 1 CVE
vim vulnerability
USN-7261-1 fixed vulnerabilities in Vim. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly …
first Apr 1, 2025 -
Medium max 4.2USN-7261-1 1 CVE
vim vulnerability
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of service.
first Feb 10, 2025 -
Medium max 6.9
jquery vulnerabilities
It was discovered that jQuery incorrectly handled parsing untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code.
first Jan 30, 2025 -
Medium max 5.4USN-7244-1 2 CVEs
jinja2 vulnerabilities
It was discovered that Jinja2 incorrectly handled certain filenames when compiling template content. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-56201) It was discovered that Jinja2 incorrectly handled string formatting call…
first Jan 30, 2025 -
Critical max 9.8
tomcat6 vulnerability
Pierre Ernst discovered that the Tomcat JmxRemoteLifecycleListener did not implement a recommended fix. A remote attacker could possibly use this issue to execute arbitrary code.
first Jan 30, 2025 -
Critical max 9.8USN-7230-1 1 CVE
quagga vulnerability
Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resulting in a denial of service.
first Jan 27, 2025 -
Medium max 4.2USN-7220-1 1 CVE
vim vulnerability
It was discovered that Vim incorrectly handled memory when closing buffers with the visual mode active. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Jan 21, 2025 -
High max 8.8USN-7210-1 4 CVEs
dotnet8, dotnet9 vulnerabilities
It was discovered that .NET did not properly handle input provided to its Convert.TryToHexString method. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21171) It was discovered that .NET did not properly handle an integer overf…
first Jan 16, 2025 -
Low max 2.1USN-7207-2 2 CVEs
git vulnerabilities
USN-7207-1 fixed vulnerabilities in Git. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use th…
first Feb 27, 2025 -
Low max 2.1USN-7207-1 2 CVEs
git vulnerabilities
It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to mislead the user into typing passwords for trusted sites that would then be sent to untrusted sites instead. (CVE-2024-50349)…
first Jan 14, 2025 -
UnscoredUSN-7187-1 2 CVEs
linux-oem-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Intel ASoC drivers; (CVE-2024-50011, CVE-2024-47715)
first Jan 6, 2025 -
Critical max 9.8
salt vulnerability
It was discovered that Salt incorrectly handled web requests when the SSH client was enabled. An attacker could possibly use this issue to achieve remote code execution or obtain sensitive information.
first Jan 6, 2025 -
Low max 3.1USN-7143-1 2 CVEs
rabbitmq-server vulnerabilities
Christian Rellmann discovered that RabbitMQ Server did not properly sanitize user input when adding a new user via the management UI. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. (CVE-2021-32718) …
first Dec 9, 2024 -
Medium max 5.3USN-7133-1 1 CVE
haproxy vulnerability
Yuki Mogi discovered that HAProxy incorrectly handled the interpretation of certain HTTP requests. A remote attacker could possibly use this issue to perform a request smuggling attack and obtain sensitive information.
first Dec 3, 2024 -
Medium max 5.5USN-7128-1 1 CVE
pygments vulnerability
Sebastian Chnelik discovered that Pygments had an inefficient regex query for analyzing certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Nov 26, 2024