Known vulnerabilities in Ubuntu 21.10 - page 4

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 21.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 716
Public exploits: 46
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 21.10 Ubuntu 21.10 is affected by 716 vulnerabilities: 5 critical, 153 high, 289 medium, 269 low Critical High Medium Low

Vulnerabilities (716)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64522 - Security Features
CVE-2021-0146		 CWE-254 Low
No
No
 - 20.06.2022 SB2021110952
SB2022062041
SB2022072838
and 8 more
#VU64461 - Exposure of sensitive information to an unauthorized actor
CVE-2022-26847		 CWE-200 Medium
No
No
 - 17.06.2022 SB2022061719
SB2022061731
SB2023030235
#VU64460 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-26846		 CWE-79 Low
No
No
 - 17.06.2022 SB2022061719
SB2022061731
SB2023030235
#VU64459 - Unrestricted Upload of File with Dangerous Type
CVE-2021-44123		 CWE-434 Medium
No
No
 - 17.06.2022 SB2022061718
SB2022061731
SB2023030235
#VU64458 - Cross-Site Request Forgery (CSRF)
CVE-2021-44122		 CWE-352 Medium
No
No
 - 17.06.2022 SB2022061718
SB2022061731
SB2023030235
#VU64456 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44120		 CWE-79 Low
No
No
 - 17.06.2022 SB2022061718
SB2022061731
SB2023030235
#VU64455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-44118		 CWE-79 Low
No
No
 - 17.06.2022 SB2022061718
SB2022061731
SB2023030235
#VU64376 - Incomplete cleanup
CVE-2022-21127		 CWE-459 Low
No
No
 - 14.06.2022 SB2022061463
SB2022061464
SB2022061630
and 36 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU63349 - Improper Access Control
CVE-2021-33117		 CWE-284 Low
No
No
 - 17.05.2022 SB2022051745
SB2022061204
SB2022062041
and 5 more
#VU63348 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21151		 CWE-200 Low
No
No
 - 17.05.2022 SB2022051744
SB2022061204
SB2022062041
and 12 more
#VU60493 - Improper input validation
CVE-2021-0127		 CWE-20 Low
No
No
 - 10.02.2022 SB2022021007
SB2022031814
SB2022062041
and 13 more
#VU60492 - Out-of-bounds read
CVE-2021-33120		 CWE-125 Low
No
No
 - 10.02.2022 SB2022021006
SB2022062041
SB2022072838
and 7 more
#VU60491 - Exposure of sensitive information to an unauthorized actor
CVE-2021-0145		 CWE-200 Low
No
No
 - 10.02.2022 SB2022021005
SB2022062041
SB2022072838
and 7 more
#VU55942 - Access of Memory Location After End of Buffer
CVE-2021-36046		 CWE-788 High
No
No
 - 18.08.2021 SB2021081809
SB2022061730
#VU55940 - Out-of-bounds read
CVE-2021-36045		 CWE-125 High
No
No
 - 18.08.2021 SB2021081809
SB2022061730
#VU48694 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28984		 CWE-94 Medium
No
No
 - 23.11.2020 SB2020112714
SB2020112715
SB2022061731
and 1 more
#VU18936 - NULL Pointer Dereference
CVE-2018-12648		 CWE-476 Medium
No
No
 - 28.06.2019 SB2019062701
SB2019062708
SB2019081009
and 3 more


Showing elements 61 - 80 out of 716