Known vulnerabilities in ledgersmb (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
ledgersmb (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:ledgersmb_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1.6.33+ds-2
1.6.33+ds-2.1
1.6.33+ds-1
1.6.9+ds-2
1.6.9+ds-2+deb11u1
1.6.9+ds-2+deb11u2
1.6.9+ds-2+deb11u3
1.6.9+ds-2.1
1.6.33+ds-2.2ubuntu1
1.6.33+ds-2.2
1.3.46-1ubuntu0.1~esm1
1.4.42+ds-1ubuntu0.1~esm1
1.6.9+ds-1ubuntu0.1+esm1
1.6.33+ds-1ubuntu0.1
1.6.33+ds-2.1ubuntu0.1
1.6.33+ds-2.2ubuntu0.25.04.1
1.6.9+ds-1ubuntu0.1
1.6.9+ds-2ubuntu0.1
1.6.9+ds
1.4.42+ds
1.3.46
1.3.25
1.6.9+ds-1
1.6.8+ds-1
1.6.6+ds-2
1.5.21+ds-2
1.6.5+ds-1
1.6.6+ds-1
1.4.33+ds-1~bpo8+1
1.5.21+ds-1
1.4.42+ds-2
1.4.42+ds-1
1.4.41+ds-1
1.4.34+ds-2
1.4.33+ds-1
1.4.34+ds-1
1.4.32+ds-1
1.4.31+ds-1
1.4.30+ds-1
1.3.46-1~bpo8+1
1.3.47-1
1.1.99rc5.2-1
1.1.99rc5.2-2
1.1.99rc5.2-3
1.2.0-1
1.2.1-1
1.2.2-1
1.2.3-1
1.2.3-2
1.2.4-1
1.2.5-1
1.2.5-2
1.2.13-1
1.2.14-1
1.2.15-1
1.2.15-2
1.2.16-1
1.2.17-1
1.2.18-1
1.2.19-1
1.2.20-1
1.2.21-1
1.2.22-1
1.2.23-1
1.2.24-1
1.2.25-1
1.3.0-1
1.3.8-1
1.3.9-1
1.3.9-2
1.3.10-1
1.3.11-1
1.3.12-1
1.3.13-1
1.3.14-1
1.3.14-2
1.3.15-1
1.3.15-2
1.3.16-1
1.3.17-1
1.3.18-1
1.3.18-2
1.3.21-1
1.3.21-2
1.3.23-1
1.3.25-1
1.3.39-1
1.3.40-1
1.3.46-1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113031 - Cross-Site Request Forgery (CSRF) CVE-2024-23831 |
CWE-352 | Medium | 1.3.46-1ubuntu0.1~esm1, 1.4.42+ds-1ubuntu0.1~esm1, 1.6.9+ds-1ubuntu0.1+esm1, 1.6.33+ds-1ubuntu0.1, 1.6.33+ds-2.1ubuntu0.1, 1.6.33+ds-2.2ubuntu0.25.04.1 | 17.07.2025 |
SB2025071790 SB2025071795 |
||
| #VU99654 - Missing Encryption of Sensitive Data CVE-2021-3882 |
CWE-311 | Medium | 1.3.46-1ubuntu0.1~esm1, 1.4.42+ds-1ubuntu0.1~esm1, 1.6.9+ds-1ubuntu0.1+esm1, 1.6.33+ds-1ubuntu0.1, 1.6.33+ds-2.1ubuntu0.1, 1.6.33+ds-2.2ubuntu0.25.04.1 | 04.11.2024 |
SB2024110415 SB2024110416 SB2025071795 |
||
| #VU56098 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-3694 |
CWE-79 | Low | 1.3.46-1ubuntu0.1~esm1, 1.4.42+ds-1ubuntu0.1~esm1, 1.6.9+ds-1ubuntu0.1, 1.6.9+ds-1ubuntu0.1+esm1, 1.6.9+ds-2ubuntu0.1, 1.6.33+ds-1ubuntu0.1, 1.6.33+ds-2.1ubuntu0.1, 1.6.33+ds-2.2ubuntu0.25.04.1 | 25.08.2021 |
SB2021082521 SB2021082523 SB2021093019 and 1 more |
||
| #VU56097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-3693 |
CWE-79 | Low | 1.3.46-1ubuntu0.1~esm1, 1.4.42+ds-1ubuntu0.1~esm1, 1.6.9+ds-1ubuntu0.1, 1.6.9+ds-1ubuntu0.1+esm1, 1.6.9+ds-2ubuntu0.1, 1.6.33+ds-1ubuntu0.1, 1.6.33+ds-2.1ubuntu0.1, 1.6.33+ds-2.2ubuntu0.25.04.1 | 25.08.2021 |
SB2021082521 SB2021082523 SB2021093019 and 1 more |
||
| #VU56096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2021-3731 |
CWE-451 | Low | 1.3.46-1ubuntu0.1~esm1, 1.4.42+ds-1ubuntu0.1~esm1, 1.6.9+ds-1ubuntu0.1, 1.6.9+ds-1ubuntu0.1+esm1, 1.6.9+ds-2ubuntu0.1, 1.6.33+ds-1ubuntu0.1, 1.6.33+ds-2.1ubuntu0.1, 1.6.33+ds-2.2ubuntu0.25.04.1 | 25.08.2021 |
SB2021082521 SB2021082523 SB2021093019 and 1 more |