Known vulnerabilities in Ubuntu 21.04 - page 14

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 21.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 573
Public exploits: 33
Known exploited (KEV): 10

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 21.04 Ubuntu 21.04 is affected by 573 vulnerabilities: 6 critical, 110 high, 270 medium, 187 low Critical High Medium Low

Vulnerabilities (573)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63468 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3639		 CWE-601 Low
No
No
 - 20.05.2022 SB2022052019
SB2021090215
SB2021090845
and 8 more
#VU63065 - Use After Free
CVE-2021-3796		 CWE-416 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 21 more
#VU63063 - Heap-based Buffer Overflow
CVE-2021-3778		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 22 more
#VU63062 - Out-of-bounds write
CVE-2021-3770		 CWE-787 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022082104
and 5 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528		 CWE-327 Medium
No
No
 - 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more
#VU56684 - Observable discrepancy
CVE-2021-33560		 CWE-203 Medium
No
No
 - 17.09.2021 SB2021060846
SB2021091711
SB2021111210
and 22 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Public exploit available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945		 CWE-415 Low
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU56475 - Use After Free
CVE-2021-30858		 CWE-416 Critical
Public exploit available
Exploited
 - 13.09.2021 SB2021091318
SB2021091319
SB2021091322
and 21 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 - 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU56385 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3781		 CWE-94 High
Public exploit available
No
 - 07.09.2021 SB2021090718
SB2021091204
SB2021091404
and 8 more
#VU56375 - Memory corruption
CVE-2021-38494		 CWE-119 High
No
No
 - 07.09.2021 SB2021090711
SB2021091405
SB2021090929
#VU56372 - Permissions, Privileges, and Access Controls
CVE-2021-38491		 CWE-264 Low
No
No
 - 07.09.2021 SB2021090711
SB2021091405
SB2022022210
and 1 more
#VU56098 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3694		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082521
SB2021082523
SB2021093019
and 1 more
#VU56096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-3731		 CWE-451 Low
No
No
 - 25.08.2021 SB2021082521
SB2021082523
SB2021093019
and 1 more


Showing elements 261 - 280 out of 573