Known vulnerabilities in Ubuntu 20.10 - page 6

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 20.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 654
Public exploits: 44
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 20.10 Ubuntu 20.10 is affected by 654 vulnerabilities: 3 critical, 114 high, 305 medium, 232 low Critical High Medium Low

Vulnerabilities (654)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65362 - Improper input validation
CVE-2021-33620		 CWE-20 Medium
No
No
 - 15.07.2022 SB2022071601
SB2022072641
SB2023022337
and 6 more
#VU54033 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-33516		 CWE-350 Medium
No
No
 - 10.06.2021 SB2021061018
SB2021061019
SB2021062135
and 9 more
#VU53846 - Out-of-bounds read
CVE-2018-25010		 CWE-125 Low
No
No
 - 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 6 more
#VU53845 - Out-of-bounds read
CVE-2018-25009		 CWE-125 Low
No
No
 - 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 5 more
#VU53742 - Server-Side Request Forgery (SSRF)
CVE-2021-33571		 CWE-918 Medium
No
No
 - 02.06.2021 SB2021060208
SB2021061516
SB2021060234
and 5 more
#VU53741 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33203		 CWE-22 Medium
No
No
 - 02.06.2021 SB2021060208
SB2021061516
SB2021060234
and 6 more
#VU53725 - Improper Privilege Management
CVE-2021-28091		 CWE-269 Medium
No
No
 - 01.06.2021 SB2021060144
SB2021060502
SB2021080214
and 7 more
#VU53713 - Permissions, Privileges, and Access Controls
CVE-2021-29959		 CWE-264 Medium
No
No
 - 01.06.2021 SB2021060118
SB2021060127
SB2021070707
and 1 more
#VU53711 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-29961		 CWE-451 Medium
No
No
 - 01.06.2021 SB2021060118
SB2021060127
SB2021070707
and 1 more
#VU53710 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29960		 CWE-200 Low
No
No
 - 01.06.2021 SB2021060118
SB2021060127
SB2021070707
and 1 more
#VU53708 - Memory corruption
CVE-2021-29966		 CWE-119 High
No
No
 - 01.06.2021 SB2021060118
SB2021060127
SB2021070707
and 1 more
#VU53707 - Memory corruption
CVE-2021-29967		 CWE-119 High
No
No
 - 01.06.2021 SB2021060118
SB2021060127
SB2021060227
and 23 more
#VU53599 - Resource Management Errors
CVE-2021-31807		 CWE-399 Medium
Public exploit available
No
 - 26.05.2021 SB2021051025
SB2021052636
SB2021060215
and 6 more
#VU53021 - Integer overflow
CVE-2021-31808		 CWE-190 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021052636
SB2021060215
and 7 more
#VU53020 - Improper input validation
CVE-2021-31806		 CWE-20 Medium
Public exploit available
No
 - 10.05.2021 SB2021051025
SB2021052636
SB2021060215
and 9 more
#VU53019 - Missing release of memory after effective lifetime
CVE-2021-28652		 CWE-401 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 10 more
#VU53018 - Improper input validation
CVE-2021-28662		 CWE-20 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 9 more
#VU53017 - Improper input validation
CVE-2021-28651		 CWE-20 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 14 more
#VU52942 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-32052		 CWE-113 Medium
No
No
 - 06.05.2021 SB2021050627
SB2022041125
SB2022041126
and 7 more
#VU52065 - Insufficient Verification of Data Authenticity
CVE-2021-3448		 CWE-345 Medium
No
No
 - 13.04.2021 SB2021041305
SB2021041306
SB2021052607
and 10 more


Showing elements 101 - 120 out of 654