Known vulnerabilities in Ubuntu 24.04 - page 254

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 14234
Public exploits: 164
Known exploited (KEV): 36

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 14234 vulnerabilities: 25 critical, 567 high, 2043 medium, 11598 low Critical High Medium Low

Vulnerabilities (14234)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101276 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-53908		 CWE-89 High
No
No
 - 05.12.2024 SB2024120536
SB2024120537
SB2024120538
and 15 more
#VU101275 - Resource exhaustion
CVE-2024-53907		 CWE-400 Medium
No
No
 - 05.12.2024 SB2024120536
SB2024120537
SB2024120538
and 18 more
#VU100996 - Improper input validation
CVE-2024-52308		 CWE-20 High
No
No
 - 27.11.2024 SB2024112741
SB2024112744
#VU100995 - Memory corruption
CVE-2024-52531		 CWE-119 Low
No
No
 - 27.11.2024 SB2024111329
SB2024112738
SB2024112739
and 35 more
#VU100986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11003		 CWE-78 Low
Public exploit available
No
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100984 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48992		 CWE-94 Low
No
No
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100983 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-48991		 CWE-362 Low
Public exploit available
No
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100982 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48990		 CWE-94 Low
Public exploit available
Exploited
 - 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100773 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-10224		 CWE-78 Low
No
No
 - 21.11.2024 SB2024112115
SB2024112118
SB2024112139
and 7 more
#VU100669 - Improper input validation
CVE-2024-44308		 CWE-20 Critical
No
Exploited
 - 19.11.2024 SB2024111982
SB2024111983
SB2024111984
and 15 more
#VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-44309		 CWE-79 High
No
Exploited
 - 19.11.2024 SB2024111981
SB2024111982
SB2024111983
and 29 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532		 CWE-835 Low
No
No
 - 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more
#VU100445 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52530		 CWE-444 Medium
No
No
 - 13.11.2024 SB2024111328
SB2024111330
SB2024111331
and 36 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768		 CWE-444 Medium
No
No
 - 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU98053 - Use After Free
CVE-2024-47814		 CWE-416 Low
No
No
 - 07.10.2024 SB2024100711
SB2024101688
SB2024112759
and 6 more
#VU94061 - Integer underflow
CVE-2024-38517		 CWE-191 High
No
No
 - 10.07.2024 SB2024071016
SB2024072137
SB2024080532
and 4 more


Showing elements 5061 - 5080 out of 14234