Known vulnerabilities in Ubuntu 20.10 - page 16

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 20.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 654
Public exploits: 44
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 20.10 Ubuntu 20.10 is affected by 654 vulnerabilities: 3 critical, 114 high, 305 medium, 232 low Critical High Medium Low

Vulnerabilities (654)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51934 - Resource exhaustion
CVE-2021-3479		 CWE-400 Medium
No
No
 - 06.04.2021 SB2021040603
SB2021040604
SB2021071101
and 5 more
#VU51933 - Resource exhaustion
CVE-2021-3478		 CWE-400 Medium
No
No
 - 06.04.2021 SB2021040603
SB2021040604
SB2021071101
and 1 more
#VU51932 - Out-of-bounds read
CVE-2021-3477		 CWE-125 Medium
No
No
 - 06.04.2021 SB2021040603
SB2021040604
SB2021071101
and 4 more
#VU51931 - Integer overflow
CVE-2021-3475		 CWE-190 Medium
No
No
 - 06.04.2021 SB2021040603
SB2021040604
SB2021071101
and 3 more
#VU51929 - Integer overflow
CVE-2021-3476		 CWE-190 Medium
No
No
 - 06.04.2021 SB2021040603
SB2021040604
SB2021071101
and 3 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890		 CWE-300 Medium
No
No
 - 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876		 CWE-200 Medium
No
No
 - 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28957		 CWE-79 Low
No
No
 - 30.03.2021 SB2021033001
SB2021033005
SB2021040175
and 20 more
#VU51776 - Resource Management Errors
CVE-2021-27291		 CWE-399 Medium
No
No
 - 30.03.2021 SB2021031407
SB2021033004
SB2021041202
and 17 more
#VU51662 - Exposure of sensitive information to an unauthorized actor
CVE-2021-23982		 CWE-200 Medium
No
No
 - 23.03.2021 SB2021032312
SB2021032313
SB2021032505
and 20 more
#VU51661 - Out-of-bounds read
CVE-2021-23981		 CWE-125 Medium
No
No
 - 23.03.2021 SB2021032312
SB2021032313
SB2021032505
and 20 more
#VU51625 - Incomplete cleanup
CVE-2020-29623		 CWE-459 Low
No
No
 - 22.03.2021 SB2021032301
SB2021032613
SB2021032614
and 15 more
#VU51248 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25097		 CWE-444 Medium
No
No
 - 08.03.2021 SB2021030801
SB2021032504
SB2021041206
and 16 more
#VU50235 - Exposure of sensitive information to an unauthorized actor
CVE-2021-1799		 CWE-200 Medium
No
No
 - 02.02.2021 SB2021020201
SB2021020209
SB2021032301
and 13 more
#VU50234 - Type confusion
CVE-2021-1789		 CWE-843 High
No
Exploited
 - 02.02.2021 SB2021020201
SB2021020209
SB2021032301
and 13 more
#VU50233 - Permissions, Privileges, and Access Controls
CVE-2021-1801		 CWE-264 Medium
No
No
 - 02.02.2021 SB2021020201
SB2021032301
SB2021032613
and 12 more
#VU50232 - Permissions, Privileges, and Access Controls
CVE-2021-1765		 CWE-264 Medium
No
No
 - 02.02.2021 SB2021020201
SB2021032301
SB2021032613
and 15 more
#VU50043 - Business Logic Errors (3.0)
CVE-2021-1870		 CWE-840 Critical
No
Exploited
 - 27.01.2021 SB2021012702
SB2021020201
SB2021032301
and 12 more
#VU48190 - Use After Free
CVE-2020-27918		 CWE-416 High
No
No
 - 06.11.2020 SB2020110610
SB2020110611
SB2020110612
and 17 more
#VU29391 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-15049		 CWE-444 Medium
No
No
 - 30.06.2020 SB2020063011
SB2020090501
SB2020090724
and 10 more


Showing elements 301 - 320 out of 654