Known vulnerabilities in Ubuntu 21.10 - page 15

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 21.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 716
Public exploits: 46
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 21.10 Ubuntu 21.10 is affected by 716 vulnerabilities: 5 critical, 153 high, 289 medium, 269 low Critical High Medium Low

Vulnerabilities (716)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73891 - Insufficiently Protected Credentials
CVE-2022-0718		 CWE-522 Low
No
No
 - 21.03.2023 SB2023032143
SB2023011810
SB2022032455
and 2 more
#VU62079 - Use After Free
CVE-2022-24070		 CWE-416 Medium
No
No
 - 12.04.2022 SB2022041213
SB2022041263
SB2022041402
and 19 more
#VU62078 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28544		 CWE-200 Low
No
No
 - 12.04.2022 SB2022041213
SB2022041263
SB2022041402
and 10 more
#VU62051 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28347		 CWE-89 High
No
No
 - 11.04.2022 SB2022041110
SB2022041125
SB2022041267
and 8 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346		 CWE-89 High
Public exploit available
No
 - 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU62030 - Out-of-bounds read
CVE-2022-26280		 CWE-125 Low
No
No
 - 09.04.2022 SB2022040901
SB2022040902
SB2022041127
and 11 more
#VU62021 - Improper input validation
CVE-2022-25310		 CWE-20 High
No
No
 - 08.04.2022 SB2022040808
SB2022040809
SB2022040820
and 30 more
#VU62020 - Heap-based Buffer Overflow
CVE-2022-25309		 CWE-122 High
No
No
 - 08.04.2022 SB2022040808
SB2022040809
SB2022040820
and 30 more
#VU62019 - Stack-based buffer overflow
CVE-2022-25308		 CWE-121 High
No
No
 - 08.04.2022 SB2022040808
SB2022040809
SB2022040820
and 30 more
#VU61938 - Deserialization of Untrusted Data
CVE-2022-23221		 CWE-502 High
No
No
 - 06.04.2022 SB2022040618
SB2022040619
SB2022042260
and 7 more
#VU61937 - Deserialization of Untrusted Data
CVE-2021-42392		 CWE-502 Critical
Public exploit available
No
 - 06.04.2022 SB2022040617
SB2022040619
SB2022042257
and 10 more
#VU61895 - Resource exhaustion
CVE-2022-24713		 CWE-400 Medium
No
No
 - 05.04.2022 SB2022040527
SB2022040526
SB2022040529
and 34 more
#VU61893 - Memory corruption
CVE-2022-28288		 CWE-119 High
No
No
 - 05.04.2022 SB2022040526
SB2022040821
SB2022081404
#VU61891 - Resource Management Errors
CVE-2022-28287		 CWE-399 Low
No
No
 - 05.04.2022 SB2022040526
SB2022040821
SB2022081404
#VU61888 - Security Features
CVE-2022-28284		 CWE-254 Medium
No
No
 - 05.04.2022 SB2022040526
SB2022040821
SB2022081404
#VU61887 - Security Features
CVE-2022-28283		 CWE-254 Medium
No
No
 - 05.04.2022 SB2022040526
SB2022040821
SB2022081404
and 1 more
#VU61765 - Use After Free
CVE-2022-1055		 CWE-416 Low
No
No
 - 31.03.2022 SB2022033117
SB2022033118
SB2022040523
and 24 more
#VU61672 - Heap-based Buffer Overflow
CVE-2022-27666		 CWE-122 Low
Public exploit available
No
 - 29.03.2022 SB2022032901
SB2022032902
SB2022033118
and 66 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 - 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU52942 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-32052		 CWE-113 Medium
No
No
 - 06.05.2021 SB2021050627
SB2022041125
SB2022041126
and 7 more


Showing elements 281 - 300 out of 716