8,437 results · Feed
-
UnscoredUSN-6394-1 1 CVE
python3.5 vulnerability
It was discovered that Python incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
first Sep 21, 2023 -
High max 7.0USN-6391-2 1 CVE
cups vulnerability
USN-6391-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that CUPS incorrectly parsed certain Postscript objects. If a user or automated sys…
first Sep 21, 2023 -
UnscoredUSN-6382-1 1 CVE
memcached vulnerability
It was discovered that Memcached incorrectly handled certain multi-packet uploads in UDP. An attacker could possibly use this issue to cause a denial of service.
first Sep 19, 2023 -
UnscoredUSN-6380-1 6 CVEs
nodejs vulnerabilities
Rogier Schouten discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue onl…
first Sep 19, 2023 -
Medium max 4.3USN-6374-1 2 CVEs
mutt vulnerabilities
It was discovered that Mutt incorrectly handled certain email header contents. If a user were tricked into opening a specially crafted message, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-4874, CVE-2023-4875)
first Sep 14, 2023 -
Medium max 6.5USN-6372-1 1 CVE
dbus vulnerability
It was discovered that DBus incorrectly handled certain invalid messages. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service.
first Sep 14, 2023 -
High max 7.5USN-6366-1 1 CVE
postgresql-9.5 vulnerability
It was discovered that PostgreSQL incorrectly handled certain extension script substitutions. An attacker having database-level CREATE privileges can use this issue to execute arbitrary code as the bootstrap superuser.
first Sep 13, 2023 -
High max 7.1USN-6365-2 1 CVE
open-vm-tools vulnerability
USN-6365-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker coul…
first Sep 25, 2023 -
High max 7.5USN-7365-1 2 CVEs
nltk vulnerabilities
It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-3842, CVE-2021-43854)
first Mar 24, 2025 -
UnscoredUSN-7364-1 0 CVEs
opensaml vulnerability
Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages. An attacker could possibly use this issue to gain unauthorized access to a system and manipulate sensitive information.
first Mar 21, 2025 -
Critical max 9.2USN-7363-1 2 CVEs
pam-pkcs11 vulnerabilities
Marcus Rückert and Matthias Gerstner discovered that PAM-PKCS#11 did not properly handle certain return codes when authentication was not possible. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 24.04 LTS a…
first Mar 20, 2025 -
Medium max 5.9USN-7360-1 3 CVEs
alpine vulnerabilities
It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2020-14929) It was discovered that Alpine could allow untagged responses from an IMA…
first Mar 20, 2025 -
Medium max 6.3USN-7348-2 1 CVE
python3.5, python3.8 regression
USN-7348-1 fixed vulnerabilities in Python. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the Python ipaddress module contained incorrect information ab…
first Mar 24, 2025 -
UnscoredUSN-6364-1 2 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-21710) It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could poss…
first Sep 13, 2023 -
UnscoredUSN-6361-2 1 CVE
cups vulnerability
USN-6361-1 fixed a vulnerability in CUPS. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker cou…
first Sep 26, 2023 -
High max 7.5USN-6358-1 1 CVE
ruby-redcloth vulnerability
It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of service.
first Sep 12, 2023 -
UnscoredUSN-6356-1 2 CVEs
opendmarc vulnerabilities
Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC incorrectly handled certain inputs. If a user or an automated system were tricked into receiving crafted inputs, an attacker could possibly use this to falsify the domain of an e-mails origin.…
first Sep 11, 2023 -
UnscoredUSN-6353-1 1 CVE
plib vulnerability
Wooseok Kang discovered that PLIB did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted TGA file, an attacker could possibly use this issue to cause applications using PLIB to crash, resulting in a…
first Sep 7, 2023 -
High max 7.5USN-6336-1 2 CVEs
docker-registry vulnerabilities
It was discovered that Docker Registry incorrectly handled certain crafted input, A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-11468) It was discovered that Docker Registry …
first Sep 5, 2023 -
High max 7.5USN-6334-1 3 CVEs
atftp vulnerabilities
Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2020-6097) Andreas B. Mundt discovered that atftp did not properly manage certain input…
first Sep 4, 2023 -
UnscoredUSN-6319-1 1 CVE
amd64-microcode vulnerability
Daniël Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising speculative execution and branch prediction may allow unauthorised memory reads via a speculative side-channel attack. A local attacker could use this to expose s…
first Aug 30, 2023 -
UnscoredUSN-6305-3 0 CVEs
php7.0 and php7.2 regression
USN-6305-2 fixed a vulnerability in PHP. The update caused a regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update fix it. Original advisory details: It was discovered that PHP incorrectly handled certain XML files. An attacker could possibly use t…
first Jul 3, 2024 -
Critical max 9.4USN-6305-2 2 CVEs
php7.0, php7.2, php7.4 vulnerabilities
USN-6305-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain XML files. An attack…
first Feb 27, 2024 -
UnscoredUSN-6299-1 2 CVEs
poppler vulnerabilities
It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2020-36…
first Aug 17, 2023 -
UnscoredUSN-6298-1 2 CVEs
zziplib vulnerabilities
Liu Zhu discovered that ZZIPlib incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2018-7727) YiMing…
first Aug 17, 2023 -
Medium max 5.5USN-6297-1 1 CVE
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled outputting certain PDF files. A local attacker could potentially use this issue to cause a crash, resulting in a denial of service.
first Aug 17, 2023 -
UnscoredUSN-6291-1 1 CVE
gstreamer1.0 vulnerability
Hanno Bock discovered that GStreamer incorrecly handled certain datetime strings. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.
first Aug 16, 2023 -
Medium max 5.9USN-6288-2 3 CVEs
mysql-5.7 vulnerability
USN-6288-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versio…
first Oct 24, 2023 -
High max 7.5USN-6287-1 2 CVEs
golang-yaml.v2 vulnerabilities
Simon Ferquel discovered that the Go yaml package incorrectly handled certain YAML documents. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause the system to cra…
first Aug 14, 2023 -
Medium max 6.1USN-6282-1 1 CVE
velocity-tools vulnerability
Jackson Henry discovered that Velocity Tools incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
first Aug 10, 2023 -
High max 8.8USN-6281-1 1 CVE
velocity vulnerability
Alvaro Munoz discovered that Velocity Engine incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
first Aug 10, 2023 -
Critical max 9.8USN-6277-1 5 CVEs
php-dompdf vulnerabilities
It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstances. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. This issue only affected U…
first Aug 8, 2023 -
High max 7.8USN-6275-1 1 CVE
cargo, rust-cargo vulnerability
Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by any user, a local attacker could possibly use this issue to execute code as another user.
first Aug 3, 2023 -
High max 7.5USN-6274-1 1 CVE
xmltooling vulnerability
Jurien de Jong discovered that XMLTooling did not properly handle certain KeyInfo element content within an XML signature. An attacker could possibly use this issue to achieve server-side request forgery.
first Aug 3, 2023 -
High max 7.5USN-6271-1 2 CVEs
maradns vulnerabilities
Xiang Li discovered that MaraDNS incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. (CVE-2022-30256) H…
first Aug 3, 2023 -
UnscoredUSN-6265-1 1 CVE
rabbitmq-server vulnerability
It was discovered that RabbitMQ incorrectly handled certain signed-in user credentials. An attacker could possibly use this issue to expose sensitive information.
first Jul 31, 2023 -
High max 7.5USN-6263-1 7 CVEs
openjdk-8, openjdk-lts, openjdk-17 vulnerabilities
Motoyasu Saburi discovered that OpenJDK incorrectly handled special characters in file name parameters. An attacker could possibly use this issue to insert, edit or obtain sensitive information. This issue only affected OpenJDK 11 and OpenJDK 17. (CVE-2023-22…
first Aug 1, 2023 -
Medium max 6.2USN-6280-1 1 CVE
pypdf2 vulnerability
It was discovered that PyPDF2 incorrectly handled PDF files with certain markers. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial…
first Aug 10, 2023 -
UnscoredUSN-6259-1 3 CVEs
open-iscsi vulnerabilities
Jos Wetzels, Stanislav Dashevskyi, and Amine Amri discovered that Open-iSCSI incorrectly handled certain checksums for IP packets. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-13987) Jos Wetzels, Stanislav Dashevskyi, A…
first Jul 27, 2023 -
Low max 3.9
open-vm-tools vulnerability
It was discovered that Open VM Tools incorrectly handled certain authentication requests. A fully compromised ESXi host can force Open VM Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual …
first Jul 27, 2023