8,437 results · Feed
-
High max 7.8USN-7781-1 4 CVEs
inetutils vulnerabilities
Matthew Hickey discovered that Inetutils did not correctly handle certain escape characters. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-0053) It was discovered that Inetutils did not correctly handle certain memory opera…
first Sep 28, 2025 -
Medium max 5.3USN-7780-1 4 CVEs
qtbase-opensource-src vulnerabilities
It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-24607) It was discovered that Qt did not correctly parse certain strict-…
first Sep 28, 2025 -
Medium max 6.2USN-7773-1 7 CVEs
gnuplot vulnerabilities
ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-3359, CVE-2025-31178, CVE-2025-31179, CVE-2025-31181) ChenYiFan Liu discovered that Gnu…
first Sep 25, 2025 -
Medium max 6.5USN-7759-1 1 CVE
isc-kea vulnerabilities
It was discovered that Kea DHCP did not correctly handle invalid hostnames. A remote attacker could possibly use this issue to cause a denial of service.
first Sep 21, 2025 -
High max 8.8USN-7756-1 4 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly handle memory when performing magnified size calculations. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-…
first Sep 18, 2025 -
Medium max 6.9USN-7753-1 1 CVE
python-xmltodict vulnerability
Camilo Vera discovered that xmltodict parsed maliciously crafted XML input, contrary to expectations. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code.
first Sep 16, 2025 -
High max 8.0USN-7745-1 2 CVEs
cups vulnerabilities
It was discovered that CUPS incorrectly handled authentication types other than Basic. An attacker could possibly use this issue to bypass authentication. (CVE-2025-58060) It was discovered that CUPS incorrectly handled deserialization and validation of print…
first Sep 11, 2025 -
Medium max 6.2USN-7743-1 1 CVE
libxml2 vulnerability
Nikita Sveshnikov discovered that libxml2 incorrectly handled recursion when processing XPath expressions. An attacker could possibly use this issue to cause a denial of service.
first Sep 10, 2025 -
Medium max 6.5USN-7742-1 3 CVEs
gnutls28 vulnerabilities
It was discovered that GnuTLS incorrectly handled exporting Subject Alternative Name (SAN) entries containing an otherName. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. …
first Sep 9, 2025 -
Medium max 5.5USN-7740-1 1 CVE
libetpan vulnerability
It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan to crash, resulting in a denial of service.
first Sep 8, 2025 -
Medium max 6.3USN-7738-1 1 CVE
ffmpeg vulnerability
It was discovered that FFmpeg incorrectly handled the calculation of LPC order, which could lead to a stack-based buffer overflow. An attacker could possibly use this issue to cause FFmpeg to crash, resulting in a denial of service.
first Sep 4, 2025 -
Medium max 5.9USN-7729-1 4 CVEs
kdepim vulnerabilities
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that the KMail application of KDE PIM could be made to leak the plaintext of S/MIME encrypted emails when retr…
first Sep 2, 2025 -
High max 7.4USN-7728-1 3 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly process certain format strings when interpreting image filenames. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service. (CVE-2025-53014) It was discovered…
first Sep 1, 2025 -
High max 8.5USN-7723-1 1 CVE
udisks2 vulnerability
Michael Imfeld discovered that UDisks did not check the validity of input data correctly when handling files for loop devices. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Aug 28, 2025 -
Medium max 5.3USN-7718-1 1 CVE
binutils vulnerability
It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash.
first Aug 26, 2025 -
High max 7.5USN-7710-2 1 CVE
python2.7 vulnerability
USN-7710-1 fixed vulnerabilities in Python. This update provides the corresponding fix for CVE-2025-8194 for Python 2.7. Original advisory details: It was discovered that Python inefficiently parsed maliciously crafted HTML input. An attacker could possibly u…
first Aug 29, 2025 -
High max 7.5USN-7710-1 2 CVEs
python3.13, python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6, python3.5, python3.4 vulnerabilities
It was discovered that Python inefficiently parsed maliciously crafted HTML input. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-6069) It was discovered that Python incorrectly parsed maliciously crafted Tar archives. An at…
first Aug 21, 2025 -
Medium max 6.5USN-7708-1 1 CVE
poppler vulnerability
It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service.
first Aug 20, 2025 -
Medium max 5.3USN-7707-1 4 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffmedian tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. (CVE-2025-…
first Aug 20, 2025 -
Low max 3.5USN-7706-1 2 CVEs
ceph vulnerabilities
It was discovered that Ceph incorrectly handled read-only permissions. An authenticated attacker could use this issue to obtain dm-crypt encryption keys. This issue only affected Ubuntu 14.04 LTS. (CVE-2018-14662) Sergey Bobrov discovered that Ceph’s RadosGW …
first Aug 20, 2025 -
Medium max 6.2USN-7697-1 2 CVEs
aide vulnerabilities
Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious files. (CVE-2025-54389) Rajesh Pangare discovered that AIDE incorrectly handled extended file attributes. A …
first Aug 14, 2025 -
Critical max 9.1USN-7694-1 4 CVEs
libxml2 vulnerabilities
Ahmed Lekssays discovered that libxml2 did not properly perform certain mathematical operations, leading to an integer overflow. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. …
first Aug 14, 2025 -
Medium max 4.4USN-7688-1 4 CVEs
cifs-utils vulnerabilities
Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. (CVE-2020-14342) It was discovered that cifs-utils incorrectly used host cred…
first Aug 7, 2025 -
Medium max 5.5USN-7687-1 2 CVEs
poppler vulnerabilities
Jieyong Ma discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (C…
first Aug 6, 2025 -
High max 8.8USN-7677-1 2 CVEs
cloud-init vulnerabilities
Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to send hotplug-hook commands. (CVE-2024-11584) It was discovered that cloud-init granted root access to a hardcoded URL with a loca…
first Jul 28, 2025 -
High max 8.1USN-7667-1 4 CVEs
openjdk-8 vulnerabilities
It was discovered that the 2D component of OpenJDK 8 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) Mashroor Hasan …
first Jul 24, 2025 -
High max 8.8USN-7664-1 2 CVEs
ruby-sinatra vulnerabilities
It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining sensitive information. (CVE-2022-29970) It was discovered that Sinatra incorrectly handled special ch…
first Jul 22, 2025 -
High max 7.5USN-7662-1 2 CVEs
gdk-pixbuf vulnerabilities
It was discovered that GDK-Pixbuf incorrectly handled certain GIF files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-6199…
first Jul 22, 2025 -
Medium max 5.5USN-7660-1 4 CVEs
fdkaac vulnerabilities
It was discovered that fdkaac did not correctly handle certain input. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2022-36148) It was discovered …
first Jul 22, 2025 -
Medium max 6.9
drupal7 vulnerabilities
It was discovered that Drupal incorrectly parsed untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code.
first Jul 21, 2025 -
High max 7.7USN-7657-2 2 CVEs
jq vulnerabilities
USN-7657-1 fixed CVE-2024-23337 and CVE-2025-48060 in jq. This update provides the corresponding fixes for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. Original advisory details: It was discovered that jq incorrectly handled certain values when p…
first Jul 22, 2025 -
Medium max 5.9USN-7648-3 1 CVE
php7.0, php7.2, php7.4 regression
USN-7648-2 fixed vulnerabilities in PHP. The patch for CVE-2025-1735 caused a regression in php7.0, php7.2 and php7.4. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PHP incorrectly handled…
first Sep 4, 2025 -
Medium max 5.9USN-7648-2 3 CVEs
php7.0, php7.2, php7.4 vulnerabilities
USN-7648-1 fixed several vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain hostnames containin…
first Aug 21, 2025 -
High max 8.8USN-7647-1 5 CVEs
ledgersmb vulnerabilities
It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue to send a maliciously crafted URL to the server and obtain sensitive information, or execute arbitrary code. This issue only affected Ubuntu…
first Jul 17, 2025 -
High max 7.5
rails vulnerability
It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server. (CVE-2019-5418)
first Jul 17, 2025 -
Medium max 6.3USN-7645-1 4 CVEs
php7.0, php7.2 vulnerabilities
It was discovered that PHP incorrectly parsed certain HTTP response headers. An attacker could possibly use this issue to cause incorrect MIME type parsing which could result in unexpected behavior. (CVE-2025-1217) It was discovered that PHP did not properly …
first Jul 17, 2025 -
High max 7.5USN-7643-1 5 CVEs
libsoup3, libsoup2.4 vulnerabilities
Jan Różański discovered that libsoup incorrectly handled range headers in an HTTP request. An attacker could possibly use this issue to cause libsoup to consume excessive memory, resulting in a denial of service. (CVE-2025-32907) Alon Zahavi discovered that l…
first Jul 17, 2025 -
Critical max 9.1USN-7639-2 7 CVEs
apache2 vulnerabilities
USN-7639-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and addressed a regression fix (LP: #2119395). CVE-2025-49630 and CVE-2025-53020 only affected Ubuntu 1…
first Aug 19, 2025 -
High max 7.5USN-7630-1 11 CVEs
resteasy, resteasy3.0 vulnerabilities
It was discovered that RESTEasy made insufficient use of random values in asynchronous jobs. An attacker could possibly use this issue to steal user data. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6345) It was discovered that RESTEasy enabled a vul…
first Jul 10, 2025 -
High max 8.7USN-7629-2 2 CVEs
protobuf vulnerabilities
USN-7435-1 and USN-7629-1 fixed vulnerabilities in Protocol Buffers for several releases of Ubuntu. This update provides the corresponding fixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Pr…
first Sep 2, 2025