Login Request a demo
UB
Vendor
Ubuntu
18 products with CVEs on record
97
CVEs
1
On KEV
0
New 30D
Products
LK
linux kernel
Ubuntu
7.8
3 CVEs1 on KEV0 new
UL
Ubuntu Linux
Ubuntu
5.6
64 CVEs0 on KEV0 new
LI
Linux
Ubuntu
–
6 CVEs0 on KEV0 new
UB
Ubuntu
Ubuntu
7.1
6 CVEs0 on KEV0 new
PY
Python-apt
Ubuntu
5.5
3 CVEs0 on KEV0 new
LA
Language-selector
Ubuntu
–
2 CVEs0 on KEV0 new
MA
Metal AS A Service
Ubuntu
–
2 CVEs0 on KEV0 new
73
73-oubuntu
Ubuntu
–
1 CVEs0 on KEV0 new
AP
Apparmor
Ubuntu
–
1 CVEs0 on KEV0 new
BA
base-files
Ubuntu
7.0
1 CVEs0 on KEV0 new
ED
Edubuntu
Ubuntu
–
1 CVEs0 on KEV0 new
LI
Libefiboot
Ubuntu
5.5
1 CVEs0 on KEV0 new
LD
Live Dvd
Ubuntu
–
1 CVEs0 on KEV0 new
MA
MAAS
Ubuntu
6.5
1 CVEs0 on KEV0 new
NE
Network-manager
Ubuntu
–
1 CVEs0 on KEV0 new
OP
openssh
Ubuntu
7.5
1 CVEs0 on KEV0 new
UP
Upstart
Ubuntu
–
1 CVEs0 on KEV0 new
VI
Vivid
Ubuntu
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-6862
LI
Libefiboot
Ubuntu
5.5
0%
Apr 22Efivar: efivar: denial of service due to stack overflow in device path node parsing
CVE-2026-3497
OP
openssh
Ubuntu
7.5
2%
Mar 12Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions
CVE-2025-6966
PY
Python-apt
Ubuntu
5.5
0%
Dec 5Null-pointer dereference in python-apt TagSection.keys()
CVE-2025-7044
MA
MAAS
Ubuntu
6.5
0%
Dec 3Privilege Escalation in MAAS via Websocket Request Manipulation
CVE-2025-2486
ED
edk2
Ubuntu
8.8
0%
Nov 26UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu
CVE-2021-3493
In wildKEV
LK
linux kernel
Ubuntu
7.8
49%
Apr 17Linux Kernel Privilege Escalation Vulnerability
CVE-2019-15796
PY
Python-apt
Ubuntu
4.7
1%
Mar 26Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version…
CVE-2019-15795
PY
Python-apt
Ubuntu
4.7
0%
Mar 26python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier
CVE-2018-6557
BA
base-files
Ubuntu
7.0
0%
Aug 21Insecure temporary file use in base-files
CVE-2017-14461
UB
Ubuntu
Ubuntu
7.1
17%
Mar 2A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial…
CVE-2015-5479
UB
Ubuntu
Ubuntu
6.5
2%
Apr 19The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash)…
CVE-2015-1322
NE
Network-manager
Ubuntu
–
1%
Apr 29Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04…
CVE-2015-2285
UP
Upstart
Ubuntu
–
1%
Mar 12The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu Vivid 15.04, allows local users to execute arbitrary…
CVE-2015-2150
UB
Ubuntu
Ubuntu
–
1%
Mar 12Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of…
CVE-2014-1424
AP
Apparmor
Ubuntu
–
2%
Nov 24apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a…
CVE-2013-1070
MA
Metal AS A Service
Ubuntu
–
2%
Feb 17Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op…
CVE-2013-1069
MA
Metal AS A Service
Ubuntu
–
0%
Feb 17Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading…
CVE-2011-4613
LI
Linux
Ubuntu
–
1%
Feb 5The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass…
CVE-2013-2186
UB
Ubuntu
Ubuntu
–
13%
Oct 28The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote…
CVE-2011-1842
LA
Language-selector
Ubuntu
–
0%
May 3dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv…
CVE-2011-0729
LA
Language-selector
Ubuntu
–
0%
Apr 29dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to…
CVE-2011-0724
ED
Edubuntu
Ubuntu
–
3%
Feb 18The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed…
CVE-2010-0834
UL
Ubuntu Linux
Ubuntu
–
3%
Aug 10The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require…
CVE-2009-1296
73
73-oubuntu
Ubuntu
–
0%
Jun 9The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to…
CVE-2009-1601
LI
Linux
Ubuntu
–
0%
May 11The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which…
CVE-2008-6792
LI
Linux
Ubuntu
–
1%
May 7system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits…
CVE-2009-1573
LI
Linux
Ubuntu
–
0%
May 6xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain…
CVE-2009-1295
UB
Ubuntu
Ubuntu
–
0%
Apr 30Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's…
CVE-2009-0578
UL
Ubuntu Linux
Ubuntu
–
0%
Mar 5GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network…
CVE-2009-0365
UL
Ubuntu Linux
Ubuntu
–
1%
Mar 5nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared…
CVE-2008-4395
LK
Linux Kernel
Ubuntu
–
2%
Nov 6Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network…
CVE-2008-4306
LI
Linux
Ubuntu
–
2%
Nov 4Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence
CVE-2008-2285
LI
Linux
Ubuntu
–
2%
May 18The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit…
CVE-2006-7229
LK
Linux Kernel
Ubuntu
7.5
3%
Nov 15The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and spin_unlock functions, which allows remote attackers to cause a denial of service…
CVE-2007-5365
UL
Ubuntu Linux
Ubuntu
–
80%
Oct 11Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote…
CVE-2007-4601
UL
Ubuntu Linux
Ubuntu
–
2%
Aug 30A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a service uses libwrap but does not specify…
CVE-2007-1352
UL
Ubuntu Linux
Ubuntu
–
2%
Apr 6Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the…
CVE-2007-1351
UL
Ubuntu Linux
Ubuntu
–
6%
Apr 6Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to…
CVE-2006-5649
UL
Ubuntu Linux
Ubuntu
5.5
0%
Dec 14Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service…
CVE-2006-5648
UL
Ubuntu Linux
Ubuntu
5.5
0%
Dec 14Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list…
CVE-2006-6235
UL
Ubuntu Linux
Ubuntu
–
6%
Dec 7A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP…
CVE-2006-5466
UL
Ubuntu Linux
Ubuntu
–
4%
Nov 6Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow…
CVE-2006-3597
UL
Ubuntu Linux
Ubuntu
–
1%
Jul 18passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation…
CVE-2006-3378
UL
Ubuntu Linux
Ubuntu
–
0%
Jul 6passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users…
CVE-2006-1183
UL
Ubuntu Linux
Ubuntu
–
3%
Mar 13The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows…
CVE-2006-0151
UL
Ubuntu Linux
Ubuntu
–
1%
Jan 9sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of…
CVE-2005-3624
UL
Ubuntu Linux
Ubuntu
–
2%
Dec 31The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
CVE-2005-3626
UL
Ubuntu Linux
Ubuntu
–
3%
Dec 31Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
CVE-2005-3625
UL
Ubuntu Linux
Ubuntu
–
4%
Dec 31Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
CVE-2005-0106
UL
Ubuntu Linux
Ubuntu
–
0%
May 3SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the…
CVE-2005-0988
UL
Ubuntu Linux
Ubuntu
–
1%
May 2Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file…
CVE-2005-0080
UL
Ubuntu Linux
Ubuntu
–
1%
May 2The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list,…
CVE-2005-0077
UL
Ubuntu Linux
Ubuntu
–
0%
May 2The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file
CVE-2005-0206
UL
Ubuntu Linux
Ubuntu
–
3%
Apr 27The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which…
CVE-2005-0754
UL
Ubuntu Linux
Ubuntu
–
3%
Apr 22Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code
CVE-2004-1235
UL
Ubuntu Linux
Ubuntu
–
3%
Apr 14Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute…
CVE-2005-0750
UL
Ubuntu Linux
Ubuntu
–
1%
Mar 27The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or…
CVE-2005-0384
UL
Ubuntu Linux
Ubuntu
–
4%
Mar 15Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client
CVE-2005-0109
UL
Ubuntu Linux
Ubuntu
5.6
1%
Mar 5Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
CVE-2004-1051
UL
Ubuntu Linux
Ubuntu
–
1%
Mar 1sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within…