Skip to content
OpenAdvisories

Vendor

Ubuntu

40 known vulnerabilities.

Products

MAAS 5 Shiftfs in the Linux kernel 3 Linux kernel 3 grub2 in Ubuntu 3 apport 2 Unity8 2 edk2 1 Whoopsie 1 signon 1 Linux 1 Cobbler 1 Ubuntu package linux-bluefield 1 Linux kernel (aufs filesystem module) 1 openssh 1 libvirt 1 APT 1 snapweb 1 Oxide 1 unity-scope-gdrive 1 Content Hub 1 Ubuntu Download Manager 1 python-dbusmock 1 Juju 1 LXD 1 base-files 1 tmux 1 accountsservice 1 18.04 LTS (bionic) Linux kernel 1 Linux 12.04 LTS 0 Linux 17.04 0 Linux 14.04 LTS 0 Linux 16.04 LTS 0 Linux 15.04 0 Linux 15.10 0 Linux 16.10 0 Linux 10.04 LTS 0 Linux 18.04 0 Linux 20.04 0 Linux 21.10 0 Linux 20.04 LTS 0
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-3497

    Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAP…

    Ubuntu openssh openssh openssh Debian Ubuntu
  • Low 3.7
    CVE-2025-2486

    UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

    The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous ver…

    Ubuntu edk2 edk2 edk2 Debian Ubuntu
  • Low 3.9
    CVE-2015-1327

    Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access

    Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS …

    Ubuntu Content Hub
  • Low 2.0
    CVE-2015-1343

    unity-scope-gdrive search feature logs search terms to syslog

    All versions of unity-scope-gdrive logs search terms to syslog.

    Ubuntu unity-scope-gdrive unity-scope-gdrive Ubuntu
  • Low 2.0
    CVE-2014-1428

    uuid.uuid1() is not suitable as an unguessable identifier/token

    A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

    Ubuntu MAAS
  • Low 1.8
    CVE-2016-1586

    A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for…

    Ubuntu Oxide oxide-qt Ubuntu
  • Low 1.6
    CVE-2016-1584

    Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most

    In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.

    Ubuntu Unity8 qtmir Ubuntu