Known vulnerabilities in Ubuntu 20.10 - page 24

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 20.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 654
Public exploits: 44
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 20.10 Ubuntu 20.10 is affected by 654 vulnerabilities: 3 critical, 114 high, 305 medium, 232 low Critical High Medium Low

Vulnerabilities (654)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50172 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-3281		 CWE-22 High
Public exploit available
No
 - 01.02.2021 SB2021020117
SB2021020612
SB2021080213
and 7 more
#VU50040 - Heap-based Buffer Overflow
CVE-2021-3156		 CWE-122 Low
Public exploit available
Exploited
 - 26.01.2021 SB2021012632
SB2021012633
SB2021012634
and 55 more
#VU50033 - Memory corruption
CVE-2021-23965		 CWE-119 High
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 1 more
#VU50032 - Resource Management Errors
CVE-2021-23963		 CWE-399 Low
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 1 more
#VU50031 - Memory corruption
CVE-2021-23962		 CWE-119 Medium
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 1 more
#VU50030 - Exposure of sensitive information to an unauthorized actor
CVE-2021-23961		 CWE-200 Medium
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 21 more
#VU50028 - Resource Management Errors
CVE-2021-23958		 CWE-399 Low
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 1 more
#VU50026 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-23956		 CWE-451 Medium
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 1 more
#VU50023 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-23955		 CWE-451 Medium
No
No
 - 26.01.2021 SB2021012626
SB2021020109
SB2021020122
and 1 more
#VU49832 - Improper input validation
CVE-2021-2087		 CWE-20 Low
No
No
 - 20.01.2021 SB2021012067
SB2021052616
SB2021092222
and 4 more
#VU49833 - Improper input validation
CVE-2021-2088		 CWE-20 Low
No
No
 - 20.01.2021 SB2021012067
SB2021052616
SB2021092222
and 4 more
#VU49809 - Improper input validation
CVE-2021-2122		 CWE-20 Medium
No
No
 - 20.01.2021 SB2021012067
SB2021052616
SB2021092222
and 4 more
#VU50017 - Resource exhaustion
CVE-2021-3181		 CWE-400 Medium
No
No
 - 19.01.2021 SB2021012620
SB2021012621
SB2021012630
and 7 more
#VU49883 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-23239		 CWE-59 Low
No
No
 - 12.01.2021 SB2021011282
SB2021011283
SB20210120114
and 14 more
#VU49300 - Use After Free
CVE-2020-16044		 CWE-416 High
No
No
 - 06.01.2021 SB2021010608
SB2021010702
SB2021010703
and 31 more
#VU48790 - Use of Uninitialized Resource
CVE-2020-16042		 CWE-908 Medium
No
No
 - 02.12.2020 SB2020120501
SB2020120703
SB2020120912
and 29 more
#VU48684 - Authentication Bypass Using an Alternate Path or Channel
CVE-2020-25660		 CWE-288 Medium
No
No
 - 23.11.2020 SB2020112701
SB2020112704
SB2020120405
and 6 more
#VU48628 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-10753		 CWE-74 Medium
No
No
 - 26.06.2020 SB2020062624
SB2020112420
SB2020112704
and 7 more
#VU28173 - Improper Authorization
CVE-2020-10736		 CWE-285 Medium
No
No
 - 21.05.2020 SB2020052138
SB2020112419
SB2021012849
#VU14542 - Permissions, Privileges, and Access Controls
CVE-2018-1128		 CWE-264 Low
No
No
 - 28.08.2018 SB2018082808
SB2018111511
SB2019042801
and 9 more


Showing elements 461 - 480 out of 654