8,435 results · Feed
-
UnscoredUSN-7919-1 0 CVEs
binutils vulnerabilities
It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds read. A local attacker could possibly use this issue to cause GNU binutils to crash, resulting in a denial of service. This issue only affected U…
first Dec 10, 2025 -
UnscoredUSN-7918-1 0 CVEs
netty vulnerabilities
Jeppe Bonde Weikop discovered that Netty incorrectly parsed HTTP messages. When Netty is used with certain reverse proxies, a remote attacker could possibly use this issue to perform HTTP request smuggling attacks. (CVE-2025-58056) Jonas Konrad discovered tha…
first Dec 9, 2025 -
UnscoredUSN-7916-1 0 CVEs
python-apt vulnerability
Julian Andres Klode discovered that python-apt incorrectly handled deb822 configuration files. An attacker could use this issue to cause python-apt to crash, resulting in a denial of service.
first Dec 9, 2025 -
Medium max 5.1USN-7912-2 1 CVE
cups vulnerability
USN-7912-1 fixed vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients …
first Dec 4, 2025 -
Medium max 4.3USN-7904-1 2 CVEs
ghostscript vulnerabilities
Piotr Kajda discovered that Ghostscript incorrectly handled writing certain files. An attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service.
first Dec 3, 2025 -
High max 7.5USN-7903-1 2 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled certain characters in the FilteredRelation object. An attacker could possibly use this issue to execute arbitrary SQL commands. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ub…
first Dec 2, 2025 -
Medium max 5.3USN-7899-1 11 CVEs
binutils vulnerabilities
It was discovered that GNU binutils could be forced to perform an out- of-bounds read in certain instances. An attacker with local access to a system could possibly use this issue to cause a denial of service. (CVE-2025-11839, CVE-2025-11840) It was discovere…
first Dec 1, 2025 -
Medium max 6.0USN-7897-1 1 CVE
cups vulnerability
It was discovered that CUPS incorrectly handled input from users in the web configuration settings. An attacker could use this issue to insert malicious configuration options, causing a denial of service or possibly executing arbitrary code.
first Nov 27, 2025 -
High max 7.5USN-7890-1 1 CVE
ffmpeg vulnerability
It was discovered that FFmpeg did not properly handle the parsing of certain malformed HLS playlists. If a user were tricked into opening a specially crafted HLS playlist, an attacker could possibly use this issue to cause FFmpeg to crash, resulting in a deni…
first Nov 26, 2025 -
Medium max 4.3USN-7886-1 2 CVEs
python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6, python3.5, python3.4 vulnerabilities
It was discovered that Python inefficiently handled expanding system environment variables. An attacker could possibly use this issue to cause Python to consume excessive resources, leading to a denial of service. (CVE-2025-6075) Caleb Brown discovered that P…
first Nov 24, 2025 -
High max 7.5USN-7881-1 2 CVEs
openjdk-8 vulnerabilities
Jinfeng Guo discovered that the Security component of OpenJDK 8 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-5305…
first Nov 24, 2025 -
Medium max 4.0USN-7878-1 3 CVEs
cups-filters vulnerabilities
It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected U…
first Nov 20, 2025 -
Medium max 5.9USN-7876-1 1 CVE
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly handle memory when encoding BMP images. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue exists due to…
first Nov 20, 2025 -
High max 7.5USN-7870-1 2 CVEs
freeglut vulnerabilities
It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service.
first Nov 17, 2025 -
Critical max 9.3USN-7869-1 3 CVEs
raptor2 vulnerabilities
Hanno Böck discovered that Raptor incorrectly handled memory operations when processing certain input files. An attacker could possibly use this issue to cause Raptor to crash, resulting in a denial of service. (CVE-2020-25713) Pedro Ribeiro discovered that R…
first Nov 10, 2025 -
UnscoredUSN-7868-1 2 CVEs
raptor vulnerabilities
Hanno Böck discovered that Raptor incorrectly handled memory operations when processing certain input files. An attacker could use this issue to cause Raptor to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-18926) Hann…
first Nov 10, 2025 -
High max 7.9USN-7866-1 9 CVEs
intel-microcode vulnerabilities
Barak Gross discovered that some Intel® Xeon® processors with SGX enabled did not properly handle buffer restrictions. A local authenticated user could potentially use this issue to escalate their privileges. (CVE-2025-20053) Avinash Maddy discovered that som…
first Nov 10, 2025 -
High max 7.8USN-7852-2 1 CVE
libxml2 vulnerability
USN-7582-1 fixed a vulnerability in libxml2. This update provides the corresponding fix for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that libxslt, used by libxml2, incorrectly handled certain attrib…
first Nov 27, 2025 -
Medium max 4.7USN-7849-1 1 CVE
libssh vulnerability
Philippe Antoine discovered that libssh did not properly manage memory when calculating a session id during the key exchange process. An attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service.
first Nov 4, 2025 -
Critical max 10.0USN-7845-1 1 CVE
squid, squid3 vulnerability
Leonardo Giovannini discovered that Squid failed to redact HTTP Authentication credentials in a default configuration. An attacker could possibly use this issue to obtain sensitive information.
first Oct 28, 2025 -
Medium max 6.5USN-7844-1 1 CVE
libyaml-syck-perl vulnerability
It was discovered that YAML::Syck did not properly handle parsing YAML files. An attacker could possibly use this issue to expose sensitive information.
first Oct 28, 2025 -
High max 7.5USN-7840-1 6 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that the REXML module bunded into Ruby incorrectly handled parsing XML documents with repeated instances of certain characters. An attacker could possibly use this issue to cause REXML to consume excessive resources, leading to a denial of s…
first Oct 27, 2025 -
Critical max 9.1USN-7839-2 1 CVE
google-guest-agent vulnerability
USN-7839-1 fixed vulnerabilities in Go Cryptography. This update provides the corresponding update in the Go Cryptography module included in Google Guest Agent. Original advisory details: Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier disc…
first Nov 3, 2025 -
Critical max 9.1USN-7839-1 1 CVE
golang-go.crypto vulnerability
Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier discovered that Go Cryptography incorrectly handled public keys during SSH operations. An attacker could possibly use this issue to bypass authorization mechanisms.
first Oct 23, 2025 -
High max 7.1USN-7831-1 4 CVEs
erlang vulnerabilities
It was discovered that Erlang incorrectly handled resource allocation and consumption in the SFTP SSH module. An attacker could possibly use this issue cause Erlang to consume excessive resources, leading to a denial of service.
first Oct 21, 2025 -
Medium max 5.5USN-7828-1 2 CVEs
python-ldap vulnerabilities
It was discovered that Python LDAP incorrectly handled special characters in the special character filtering function. A remote attacker could possibly use this issue to perform LDAP injection attacks. (CVE-2025-61911) Arad Inbar discovered that Python LDAP i…
first Oct 20, 2025 -
Medium max 5.6USN-7827-1 3 CVEs
gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service.
first Oct 20, 2025 -
Critical max 10.0USN-7826-2 2 CVEs
samba vulnerabilities
USN-7826-1 fixed vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Andrew Walker discovered that Samba incorrectly initialized memo…
first Oct 20, 2025 -
High max 7.8USN-7825-1 8 CVEs
mupdf vulnerabilities
It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-1000036) It was discovered that MuPDF could enter…
first Oct 16, 2025 -
Critical max 9.8USN-7823-1 9 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-35365) It was discovered t…
first Oct 15, 2025 -
Low max 3.1USN-7818-1 1 CVE
subversion vulnerability
It was discovered that Apache Subversion incorrectly parsed control characters in filenames. An attacker could possibly use this issue to commit a corrupted revision to a repository, leading to a denial of service.
first Oct 13, 2025 -
Medium max 4.2USN-7815-1 1 CVE
vim vulnerabilities
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of service.
first Oct 9, 2025 -
High max 7.5USN-7814-1 4 CVEs
libhtp vulnerabilities
It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE…
first Oct 9, 2025 -
High max 7.5USN-7812-1 2 CVEs
imagemagick vulnerabilities
Woojin Park, Hojun Lee, Yougin Won and Siyeon Han discovered that ImageMagick did not properly sanitize image file names. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code. (CVE-202…
first Oct 8, 2025 -
High max 8.8USN-7807-1 10 CVEs
gst-plugins-base1.0 vulnerabilities
Michael Randrianantenaina discovered that GStreamer Base Plugins did not correctly handle certain integer operations. An attacker could possibly use this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453) Michael Randrianantenaina discovered tha…
first Oct 7, 2025 -
Medium max 4.0USN-7804-2 1 CVE
squid, squid3 vulnerability
USN-7804-1 fixed a vulnerability in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote …
first Nov 4, 2025 -
High max 7.1USN-7794-1 2 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled special characters in the QuerySet function calls. A remote attacker could possibly use this issue to perform SQL injection attacks. (CVE-2025-59681) It was discovered that Django incorrectly handled files wit…
first Oct 1, 2025 -
High max 7.8USN-7787-1 2 CVEs
libxslt vulnerabilities
Ivan Fratric discovered that Libxslt did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.
first Sep 30, 2025 -
High max 8.8USN-7783-1 3 CVEs
tiff vulnerabilities
Xudong Cao and Yuqing Zhang discovered that LibTIFF incorrectly handled memory when parsing malformed TIFF images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-8961) Xudong Cao and Yuqing Zha…
first Sep 29, 2025 -
High max 7.8USN-7781-1 4 CVEs
inetutils vulnerabilities
Matthew Hickey discovered that Inetutils did not correctly handle certain escape characters. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-0053) It was discovered that Inetutils did not correctly handle certain memory opera…
first Sep 28, 2025