Technology
Canonical Ubuntu and Ubuntu packages (USN). 41,388 published CVES affecting Ubuntu, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 5 of 40 · showing the latest 1,000
IMAP4.starttls() wraps the socket in TLS but leaves self._readbuf, imaplib's own read-ahead buffer, untouched. Any plaintext bytes that arrived in the same recv() as the tagged OK to STARTTLS are returned by readline() after the handshake, so the client treats them as the first r...
Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they control. When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size, and then writes the...
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.