8,435 results · Feed
-
UnscoredUSN-8234-1 0 CVEs
python-mako vulnerability
It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain sensitive information.
first May 5, 2026 -
UnscoredUSN-8226-2 0 CVEs
kmod update
USN-8226-1 added a mitigation to kmod to disable loading the algif_aead module. This update adds the same mitigation to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the Linux ker…
first Apr 30, 2026 -
UnscoredUSN-8223-1 0 CVEs
roundcube vulnerabilities
It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly use this issue to cause a homograph attack. (CVE-2019-15237) It was discovered that Roundcube Webmail did not properly sanitize certain attributes when …
first Apr 29, 2026 -
UnscoredUSN-8213-1 0 CVEs
vim vulnerabilities
Michał Majchrowicz discovered that Vim's zip plugin could overwrite arbitrary files. An attacker could possibly use this issue to delete sensitive data or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-35177) It …
first Apr 27, 2026 -
UnscoredUSN-8198-1 0 CVEs
python-tornado vulnerabilities
It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-31958) It was discovered that Tornado did not properly validate characters in cooki…
first Apr 22, 2026 -
UnscoredUSN-8197-1 0 CVEs
slurm-llnl vulnerability
It was discovered that Slurm did not properly handle access control when dealing with RPC traffic through PMI2 and PMIx, which could allow an unprivileged user to send data to an arbitrary unix socket on the host. An attacker could possibly use this issue to …
first Apr 22, 2026 -
UnscoredUSN-8178-1 0 CVEs
ofono vulnerabilities
It was discovered that oFono incorrectly handled crafted responses from AT commands. An attacker could possibly use this issue to crash the program, resulting in a denial of service or arbitrary code execution. (CVE-2024-7538, CVE-2024-7539, CVE-2024-7540, CV…
first Apr 16, 2026 -
UnscoredUSN-8169-1 0 CVEs
redis, lua5.1, lua-cjson, lua-bitop vulnerabilities
It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was only addressed in lua5.1 on Ubuntu 20.04 LTS and Ubu…
first Apr 13, 2026 -
UnscoredUSN-8127-1 0 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly process certain tags prior to an image being loaded. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2026-23952) It was discovered that ImageMa…
first Mar 30, 2026 -
UnscoredUSN-8018-1 0 CVEs
python3.14, python3.13, python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6, python3.5, python3.4 vulnerabilities
Denis Ledoux discovered that Python incorrectly parsed email message headers. An attacker could possibly use this issue to inject arbitrary headers into email messages. This issue only affected python3.6, python3.7, python3.8, python3.9, python3.10, python3.1…
first Feb 5, 2026 -
UnscoredUSN-8220-1 0 CVEs
htmlunit vulnerability
It was discovered that HtmlUnit was vulnerable to remote code execution via XSLT when browsing an attacker-controlled webpage. An attacker could possibly use this issue to execute arbitrary code in the context of the application using HtmlUnit.
first May 5, 2026 -
UnscoredUSN-8205-1 0 CVEs
gst-plugins-bad1.0 vulnerabilities
It was discovered that multiple plugins in GStreamer contained arithmetic overflows. An attacker could possibly use this issue to cause applications using the plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37…
first Apr 23, 2026 -
UnscoredUSN-8191-1 0 CVEs
commons-io vulnerability
It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this issue to cause Apache Commons IO to crash, resulting in a denial of service.
first Apr 21, 2026 -
UnscoredUSN-8189-1 0 CVEs
rapidjson vulnerability
It was discovered that RapidJSON did not properly protect against integer overflows in certain instances when parsing JSON text. A remote attacker could possibly use this issue to craft a malicious JSON file, that when read by RapidJSON, would lead to an elev…
first Apr 20, 2026 -
UnscoredUSN-8181-1 0 CVEs
libowasp-esapi-java vulnerabilities
Jaroslav Lobačevski discovered that ESAPI incorrectly validated directory paths during path verification. An attacker could possibly use this issue to bypass directory validation checks, leading to control-flow bypass. This issue only affected Ubuntu 16.04 LT…
first Apr 16, 2026 -
UnscoredUSN-8172-1 0 CVEs
kvmtool vulnerabilities
It was discovered that kvmtool did not properly manage memory under certain circumstances. A malicious guest attacker could use this issue to cause kvmtool to crash, leading to a denial of service, or possibly execute arbitrary code on the host system. (CVE-2…
first Apr 13, 2026 -
UnscoredUSN-8155-2 0 CVEs
openssl, openssl1.0 vulnerabilities
USN-8155-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for CVE-2026-28387 for openssl in Ubuntu 20.04 LTS. CVE-2026-28388 for openssl and openssl1.0 in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04…
first Apr 9, 2026 -
UnscoredUSN-8154-2 0 CVEs
python-django vulnerabilities
USN-8154-1 fixed vulnerabilities in Django. This update provides the corresponding updates for CVE-2026-33033 and CVE-2026-4292 in Ubuntu 14.04 LTS and Ubuntu 16.04 LTS, and CVE-2026-4277 in Ubuntu 16.04 LTS. Original advisory details: Seokchan Yoon discovere…
first Apr 9, 2026 -
UnscoredUSN-8150-1 0 CVEs
spip vulnerabilities
It was discovered that SPIP did not properly sanitize certain inputs. A remote attacker could possibly use this issue to perform cross site scripting. (CVE-2022-28959) It was discovered that SPIP did not properly sanitize certain inputs. A remote attacker cou…
first Apr 6, 2026 -
UnscoredUSN-8147-1 0 CVEs
libarchive vulnerabilities
It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-19221) It was discovered that libarchive incorrectly h…
first Apr 2, 2026 -
UnscoredUSN-8144-1 0 CVEs
undertow vulnerability
It was discovered that Undertow incorrectly validated the Host header in incoming HTTP requests. A remote attacker could possibly use this issue to gain unintended access to user sessions.
first Apr 2, 2026 -
UnscoredUSN-8140-1 0 CVEs
cairo vulnerabilities
Alberto Garcia, Francisco Oca and Suleman Ali discovered that Cairo did not properly manage memory. An attacker could possibly use this issue to cause Cairo to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LT…
first Apr 2, 2026 -
UnscoredUSN-8135-1 0 CVEs
pillow vulnerabilities
It was discovered that Pillow did not correctly handle reading J2K files, which could lead to an out-of-bounds read vulnerability. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to c…
first Mar 31, 2026 -
UnscoredUSN-8132-1 0 CVEs
roundcube vulnerabilities
It was discovered that Roundcube Webmail did not properly sanitize certain HTML elements within the e-mail body. An attacker could possibly use this issue to cause a cross-site scripting attack. This issue was only addressed in Ubuntu 16.04 LTS. (CVE-2016-406…
first Mar 30, 2026 -
UnscoredUSN-8122-1 0 CVEs
pjproject vulnerabilities
Youngsung Kim discovered that PJSIP did not properly parse numeric header fields in SIP messages. A remote attacker could use this issue to cause PJSIP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ub…
first Mar 24, 2026 -
UnscoredUSN-8119-2 0 CVEs
systemd vulnerabilities
USN-8119-1 fixed vulnerabilities in systemd. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that systemd incorrectly handled certain c…
first Mar 23, 2026 -
UnscoredUSN-8113-1 0 CVEs
tiff vulnerabilities
It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143) It was discovered that LibTIFF did not proper…
first Mar 23, 2026 -
UnscoredUSN-8110-1 0 CVEs
libnet-cidr-perl vulnerability
Dave Rolsky discovered that Net-CIDR did not properly sanitize IP addresses. An attacker could possibly use this to bypass IP-based restrictions.
first Mar 18, 2026 -
UnscoredUSN-8109-1 0 CVEs
debian-goodies vulnerability
Jakub Wilk discovered that debmany in Debian Goodies incorrectly handled certain deb files. An attacker could possibly use this issue to execute arbitrary shell commands.
first Mar 18, 2026 -
UnscoredUSN-8108-1 0 CVEs
bouncycastle vulnerabilities
It was discovered that Bouncy Castle did not sanitize user input when inserting it into an LDAP search filter. An attacker could possibly use this issue to perform an LDAP injection attack. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 2…
first Mar 18, 2026 -
UnscoredUSN-8103-1 0 CVEs
exiv2 vulnerabilities
It was discovered that Exiv2 did not correctly handle reading certain buffers. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-18771) Wen Cheng discovered that …
first Mar 18, 2026 -
UnscoredUSN-8102-1 0 CVEs
snapd vulnerability
Qualys discovered that snapd incorrectly handled certain operations in the snap's private /tmp directory. If systemd-tmpfiles is enabled to automatically clean up this directory, a local attacker could possibly use this issue to re-create the deleted director…
first Mar 17, 2026 -
UnscoredUSN-8101-1 0 CVEs
vim vulnerabilities
Rahul Hoysala discovered that Vim did not correctly handle certain tag resolutions. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-25749) It was discovered that Vim did not correctly handle processing certain specialKey comm…
first Mar 16, 2026 -
UnscoredUSN-8089-3 0 CVEs
adsys, juju-core, lxd vulnerabilities
USN-8089-1 fixed vulnerabilities in Go Networking. This update provides the corresponding update to code vendored in LXD, ADSys, and Juju Core. Original advisory details: Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and Kaan Onarlioglu…
first Apr 7, 2026 -
UnscoredUSN-8089-2 0 CVEs
golang-golang-x-net-dev vulnerabilities
USN-8089-1 fixed vulnerabilities in Go Networking. This update provides the corresponding update to code vendored in golang-golang-x-net-dev. Original advisory details: Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and Kaan Onarlioglu d…
first Mar 31, 2026 -
UnscoredUSN-8082-1 0 CVEs
gimp vulnerabilities
Michael Randrianantenaina discovered that GIMP incorrectly handled certain malformed ICO files. An attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2025-5473) Seungho Kim discovered that GIMP incorrectly handled ce…
first Mar 10, 2026 -
UnscoredUSN-8080-1 0 CVEs
yara vulnerabilities
Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issue…
first Mar 9, 2026 -
UnscoredUSN-8077-1 0 CVEs
python-bleach vulnerabilities
It was discovered that Bleach did not properly sanitize URI attributes containing character entities. An attacker could possibly use this issue to construct a URI with a disallowed scheme that would bypass sanitization, leading to cross-site scripting. This i…
first Mar 5, 2026 -
UnscoredUSN-8076-1 0 CVEs
qtbase-opensource-src vulnerabilities
It was discovered that Qt did not correctly handle OpenSSL's error queue. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 20.04 LTS. (CVE-2020-13962) It was discovered that Qt incorrectly handled…
first Mar 5, 2026 -
UnscoredUSN-8075-1 0 CVEs
gimp vulnerabilities
Michael Randrianantenaina discovered that calculating the linear size of a DDS file could overflow on 32-bit systems. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, …
first Mar 4, 2026