CVE Browser

Efivar: efivar: denial of service due to stack overflow in device path node parsing

openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

Null-pointer dereference in python-apt TagSection.keys()

Privilege Escalation in MAAS via Websocket Request Manipulation

UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

DDoS in Ubuntu package linux-bluefield

Accountsservice incorrectly drops privileges

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another u…

QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.

Free of static data in accountsservice

kernel: overlayfs file system caps privilege escalation

Ubuntu linux kernel shiftfs file system double free vulnerability

tmux stack buffer overflow in function input_csi_dispatch_sgr_colon

Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability

GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already e…

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

Online Accounts Signon daemon gives out all oauth tokens to any app

Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

Mishandling of file-system uid/gid with namespaces in shiftfs

Type confusion in shiftfs

Reference count underflow in shiftfs

Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615

python-apt downloads from untrusted sources

python-apt uses MD5 for validation