Known vulnerabilities in Ubuntu 20.04 - page 111

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 20.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9617
Public exploits: 343
Known exploited (KEV): 83
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 20.04 Ubuntu 20.04 is affected by 9617 vulnerabilities: 46 critical, 1238 high, 2888 medium, 5442 low Critical High Medium Low

Vulnerabilities (9617)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64459		 CWE-89 Medium
Public exploit available
No
 - 05.11.2025 SB2025110551
SB2025110552
SB2025111466
and 14 more
#VU117839 - Out-of-bounds read
CVE-2025-11683		 CWE-125 Medium
No
No
 - 30.10.2025 SB2025103050
SB2025103051
SB2025103056
and 4 more
#VU117665 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-6605		 CWE-611 Low
No
No
 - 27.10.2025 SB2025102710
SB2025102719
#VU117664 - Heap-based Buffer Overflow
CVE-2025-9951		 CWE-122 High
No
No
 - 27.10.2025 SB2025102709
SB2025102719
#VU117663 - NULL Pointer Dereference
CVE-2025-10256		 CWE-476 Low
No
No
 - 27.10.2025 SB2025102708
SB2025102719
SB2026072205
#VU117662 - NULL Pointer Dereference
CVE-2023-6603		 CWE-476 Low
No
No
 - 27.10.2025 SB2025102708
SB2025102719
SB2025112728
#VU117393 - Resource exhaustion
CVE-2025-48041		 CWE-400 Medium
No
No
 - 20.10.2025 SB2025102052
SB2025102180
SB2025102745
and 3 more
#VU117392 - Uncontrolled Recursion
CVE-2025-48040		 CWE-674 Medium
No
No
 - 20.10.2025 SB2025102052
SB2025102180
SB20260105126
and 5 more
#VU117391 - Resource exhaustion
CVE-2025-48039		 CWE-400 Medium
No
No
 - 20.10.2025 SB2025102052
SB2025102180
SB20260105126
and 7 more
#VU117390 - Resource exhaustion
CVE-2025-48038		 CWE-400 Medium
No
No
 - 20.10.2025 SB2025102052
SB2025102054
SB2025102055
and 6 more
#VU117357 - Externally-generated error message containing sensitive information
CVE-2025-62168		 CWE-211 Low
Public exploit available
No
 - 17.10.2025 SB2025101757
SB2025101803
SB2025101804
and 26 more
#VU117297 - Command injection
CVE-2025-59419		 CWE-77 Medium
No
No
 - 15.10.2025 SB20251015146
SB2025102483
SB2025102484
and 14 more
#VU116638 - Stack-based buffer overflow
CVE-2025-59362		 CWE-121 Medium
No
No
 - 06.10.2025 SB2025100658
SB2025100659
SB2025100666
and 8 more
#VU115966 - NULL Pointer Dereference
CVE-2025-7700		 CWE-476 Medium
No
No
 - 19.09.2025 SB20250919148
SB20250919153
SB20250919154
and 9 more
#VU115173 - NULL Pointer Dereference
CVE-2025-8114		 CWE-476 Medium
No
No
 - 12.09.2025 SB2025091208
SB2025091219
SB2025091220
and 12 more
#VU114832 - Improper Locking
CVE-2025-38727		 CWE-667 Low
No
No
 - 05.09.2025 SB2025090503
SB2025092304
SB20251015148
and 16 more
#VU114416 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-6442		 CWE-444 Medium
No
No
 - 25.08.2025 SB2024100844
SB2025082565
SB2025082567
and 10 more
#VU109964 - Out-of-bounds read
CVE-2025-47219		 CWE-125 Medium
No
No
 - 30.05.2025 SB2025053005
SB2025062106
SB2025062318
and 7 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Public exploit available
No
 - 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU98142 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-47220		 CWE-444 Medium
No
No
 - 08.10.2024 SB2024100844
SB2024100847
SB2024100853
and 16 more


Showing elements 2201 - 2220 out of 9617