ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 6 September 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7544-1 Related CVEs: CVE-2025-47273 CVE-2024-6345 CVE-2022-40897 Upstream summary: It was discovered that setuptools did not properly sanitize paths. An attacker could possibly use this issue to write files to arbitrary […]

🟠 High   ⏱ 15–60 min  Last verified: 6 September 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7904-1 Related CVEs: CVE-2025-59799 CVE-2025-59798 CVE-2024-56827 CVE-2025-48708 CVE-2024-29508 CVE-2025-27836 CVE-2025-27832 CVE-2025-27835  +12 more Upstream summary: Piotr Kajda discovered that Ghostscript incorrectly handled writing certain files. An attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 6 September 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7888-1 Related CVEs: CVE-2023-51106 CVE-2023-51103 CVE-2024-46657 CVE-2025-46206 CVE-2023-51104 CVE-2023-51105 CVE-2020-26683 CVE-2018-16647  +6 more Upstream summary: It was discovered that MuPDF could be made to divide by zero. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 September 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7945-1 Related CVEs: CVE-2025-7424 CVE-2025-24855 CVE-2024-55549 Upstream summary: Ivan Fratric discovered that Libxslt was vulnerable to type confusion when performing XML transformations. An attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 4 September 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7958-1 Related CVEs: CVE-2024-8372 CVE-2019-14863 CVE-2025-0716 CVE-2023-26117 CVE-2024-8373 CVE-2025-2336 CVE-2024-21490 CVE-2023-26116  +2 more Upstream summary: It was discovered that AngularJS did not properly sanitize certain `xlink:href` attributes. A remote attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 September 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7527-1 Related CVEs: CVE-2025-40907 Upstream summary: It was discovered that libfcgi-perl incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7093-1 Related CVEs: CVE-2024-49767 CVE-2024-34069 Upstream summary: It was discovered that Werkzeug incorrectly handled multiple form submission requests. A remote attacker could possibly use this issue to cause Werkzeug to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8181-1 Related CVEs: CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Upstream summary: Jaroslav Lobačevski discovered that ESAPI incorrectly validated directory paths during path verification. An attacker could possibly use this issue to bypass directory […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 September 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7697-1 Related CVEs: CVE-2025-54409 CVE-2025-54389 CVE-2021-45417 Upstream summary: Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 September 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7944-1 Related CVEs: CVE-2025-68615 CVE-2022-44792 CVE-2022-44793 CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809  +1 more Upstream summary: Bahae Bahrini discovered that Net-SNMP could be made to write out of bounds. If a […]