Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Apport
HIGH 7.8
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.
Ubuntu Linux
HIGH 7.8
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files …
Ubuntu Linux
HIGH 7.8
Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() corre…
Unity Firefox Extension
MEDIUM 6.5
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by s…
Remote Login Service
MEDIUM 5.5
In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnera…
Ubuntu Linux
MEDIUM 5.5
GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equ…
Ubuntu Linux
MEDIUM 5.5
Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1…
Snapcraft
MEDIUM 6.8
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execu…
Software Properties
HIGH 7.4
software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. softwar…
Ubuntu Linux
HIGH 7.8
PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of…
Ubuntu Linux
HIGH 7.8
Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite ar…
Ubuntu Linux
MEDIUM 6.1
In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manife…
Ubuntu Linux
HIGH 8.8
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflo…
Ubuntu Linux
HIGH 7.8
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memor…
Ubuntu Linux
HIGH 7.8
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into…
Ubuntu Linux
HIGH 7.1
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to …
Ubuntu Linux
HIGH 7.8
A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitr…
Ubuntu Linux
HIGH 7.8
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalati…
Ubuntu Linux
HIGH 7.8
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalati…
Ubuntu Linux
HIGH 7.8
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vu…
Ubuntu Linux
CRITICAL 9.8
WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.
Ubuntu Linux
CRITICAL 9.8
CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.
Add Apt Repository
MEDIUM 5.5
Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) desc…
Ubuntu Linux
MEDIUM 6.5
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed again…
Ubuntu Linux
MEDIUM 6.5
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed again…
Ppp
MEDIUM 5.5
The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacke…
Checkinstall
HIGH 7.8
checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 executable file.
Ubuntu Linux
HIGH 7.5
Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a …
Ubuntu Linux
HIGH 7.5
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can explo…
Ubuntu Linux
HIGH 7.5
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send …