8,435 results · Feed
-
UnscoredUSN-7955-1 0 CVEs
python-urllib3 vulnerability
It was discovered that urllib3 incorrectly handled decompression during HTTP redirects. An attacker could possibly use this issue to cause urllib3 to use excessive resources, causing a denial of service.
first Jan 12, 2026 -
UnscoredUSN-7948-1 0 CVEs
gpsd vulnerabilities
It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-67268) It was discovered that GPSd incorrectl…
first Jan 8, 2026 -
High max 7.2
roundcube vulnerability
It was discovered that Roundcube Webmail was prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document. An attacker could use this issue to execute arbitrary web script in the context of an affected user's session.
-
High max 7.3USN-8481-1 1 CVE
nss vulnerability
Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11 URI escape sequences. An attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service, or obtain sensitive information.
first Jun 29, 2026 -
UnscoredUSN-8412-3 0 CVEs
qemu regression
USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Fe…
first Jun 28, 2026 -
UnscoredUSN-8474-1 0 CVEs
NSD vulnerabilities
It was discovered that NSD incorrectly handled APL resource records with an address length larger than permitted for the address family. A remote attacker could use this to cause a stack-based buffer overflow when the zone is written to disk, potentially exec…
first Jun 25, 2026 -
UnscoredUSN-8459-1 0 CVEs
haproxy vulnerabilities
It was discovered that HAProxy incorrectly handled the FCGI demultiplexer record length field. A remote attacker could possibly use this issue to cause incorrect request routing, response smuggling, or other memory safety issues. (CVE-2026-55203) It was disco…
first Jun 22, 2026 -
UnscoredUSN-8434-1 0 CVEs
nova vulnerability
It was discovered that Nova did not strip internal _nova-prefixed scheduler hints supplied by users on instance creation. An attacker could possibly use this issue to bypass Placement resource claims and scheduling constraint enforcement.
first Jun 16, 2026 -
UnscoredUSN-8271-1 0 CVEs
nginx vulnerability
It was discovered that the nginx ngx_http_rewrite_module component incorrectly handled certain rewrite directives. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code.
first May 14, 2026 -
UnscoredUSN-8215-1 0 CVEs
dotnet10 vulnerability
It was discovered that the Microsoft.AspNetCore.DataProtection library in .NET did not properly verify cryptographic signatures under certain conditions. A remote attacker could possibly use this issue to elevate privileges.
first Apr 28, 2026 -
High max 7.5USN-7094-1 10 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled memory during certain VNC operations. A remote attacker could possibly use this issue to cause QEMU to consume resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-20…
first Nov 8, 2024 -
UnscoredUSN-8168-2 0 CVEs
rustc, rustc-1.76, rustc-1.77, rustc-1.78, rustc-1.79, rustc-1.80 vulnerability
USN-8168-1 fixed a vulnerability in Rust. This update provides the corresponding update to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that tar-rs embedded in rustc incorrectly handle…
first Apr 14, 2026 -
Medium max 5.3USN-7080-1 1 CVE
unbound vulnerability
Toshifumi Sakaguchi discovered that Unbound incorrectly handled name compression for large RRsets, which could lead to excessive CPU usage. An attacker could potentially use this issue to cause a denial of service by sending specially crafted DNS responses.
first Oct 22, 2024 -
High max 7.8USN-7070-1 3 CVEs
libarchive vulnerabilities
It was discovered that libarchive mishandled certain memory checks, which could result in a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubunt…
first Oct 16, 2024 -
High max 8.8USN-7107-1 1 CVE
zlib vulnerability
It was discovered that Minizip in zlib incorrectly handled certain zip header fields. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.
first Nov 13, 2024 -
UnscoredUSN-7068-1 33 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into processing a specially crafted file, an attacker could exploit this to cause a denial of service or affect …
first Oct 15, 2024 -
Medium max 6.7USN-7064-2 1 CVE
nano vulnerability
USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed…
first Oct 29, 2024 -
UnscoredUSN-7053-1 25 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or potential…
first Oct 3, 2024 -
Medium max 4.5USN-7048-2 1 CVE
vim vulnerability
USN-7048-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflo…
first Oct 16, 2024 -
Low max 3.7USN-7040-2 1 CVE
configobj vulnerability
USN-7040-1 fixed a vulnerability in ConfigObj. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that ConfigObj contains regex that is susceptible to catastrophic backtracking. An attacker could p…
first Oct 14, 2024 -
Medium max 5.5USN-7038-2 1 CVE
apr vulnerability
USN-7038-1 fixed a vulnerability in Apache Portable Runtime (APR) library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR…
first Oct 16, 2024 -
Critical max 9.8USN-7018-1 6 CVEs
openssl vulnerabilities
Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovsky discovered that certain Diffie-Hellman ciphersuites in the TLS specification and implemented by OpenSSL contained a flaw. A remote attacker could possibly use this issue to eavesdrop on encr…
first Sep 18, 2024 -
UnscoredUSN-7015-6 0 CVEs
python2.7 regresssions
USN-7015-5 fixed vulnerabilities in python2.7. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the Python email module incorrectly parsed ema…
first Nov 22, 2024 -
High max 7.5USN-7015-5 2 CVEs
python2.7 vulnerabilities
USN-7015-1 fixed several vulnerabilities in Python. This update provides the corresponding update for CVE-2024-6232 and CVE-2024-6923 for python2.7 in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Original adviso…
first Nov 19, 2024 -
Medium max 5.3USN-7015-4 1 CVE
python2.7, python3.5 vulnerability
USN-7015-1 fixed several vulnerabilities in Python. This update provides the corresponding update for CVE-2023-27043 for python2.7 and python3.5 in Ubuntu 14.04 LTS. Original advisory details: It was discovered that the Python email module incorrectly parsed …
first Oct 14, 2024 -
Medium max 4.7USN-7014-3 1 CVE
nginx vulnerability
USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments whe…
first Oct 14, 2024 -
High max 8.8USN-7002-1 1 CVE
python-setuptools, setuptools vulnerability
It was discovered that setuptools was vulnerable to remote code execution. An attacker could possibly use this issue to execute arbitrary code.
first Sep 12, 2024 -
Critical max 9.8USN-7000-1 3 CVEs
expat vulnerabilities
Shang-Hung Wan discovered that Expat did not properly handle certain function calls when a negative input length was provided. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2024-45490) Shang-Hung Wan di…
first Sep 12, 2024 -
Medium max 4.8USN-6998-1 2 CVEs
unbound vulnerabilities
It was discovered that Unbound incorrectly handled string comparisons, which could lead to a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. (CVE-2024-43167) It was discovered that Unbound incorrectly handl…
first Sep 11, 2024 -
High max 7.5USN-6997-2 1 CVE
tiff vulnerability
USN-6997-1 fixed a vulnerability in LibTIFF. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the appli…
first Sep 11, 2024 -
Medium max 4.5USN-6993-1 2 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when closing a window, leading to a double-free vulnerability. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possi…
first Sep 5, 2024 -
Medium max 6.5USN-6985-1 11 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute c…
first Sep 4, 2024 -
High max 8.3USN-6988-1 2 CVEs
twisted vulnerabilities
Ben Kallus discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay and manipulate responses. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671) It was…
first Sep 4, 2024 -
UnscoredUSN-6980-1 10 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly …
first Aug 22, 2024 -
High max 8.0USN-6978-1 15 CVEs
libxstream-java vulnerabilities
It was discovered that XStream incorrectly handled parsing of certain crafted XML documents. A remote attacker could possibly use this issue to read arbitrary files. (CVE-2016-3674) Zhihong Tian and Hui Lu found that XStream was vulnerable to remote code exec…
first Aug 22, 2024 -
Critical max 9.1USN-6969-1 9 CVEs
cacti vulnerabilities
It was discovered that Cacti did not properly apply checks to the "Package Import" feature. An attacker could possibly use this issue to perform arbitrary code execution. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS and Ubuntu…
first Aug 20, 2024 -
High max 8.8USN-6968-3 1 CVE
postgresql-10, postgresql-9.3 vulnerability
USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for PostgreSQL-9.3 in Ubuntu 14.04 LTS and PostgreSQL-10 in Ubuntu 18.04 LTS. Original advisory details: Noah Misch discovered th…
first Oct 14, 2024 -
High max 7.3USN-6965-1 5 CVEs
vim vulnerabilities
It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. (CVE-2021-3973) It was disco…
first Aug 21, 2024 -
UnscoredUSN-6958-1 4 CVEs
libcroco vulnerabilities
It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 L…
first Aug 13, 2024 -
Critical max 9.1USN-6947-1 2 CVEs
krb5 vulnerabilities
It was discovered that Kerberos incorrectly handled GSS message tokens where an unwrapped token could appear to be truncated. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-37370) It was discovered that Kerberos incorrectly …
first Aug 8, 2024