Known vulnerabilities in Ubuntu 24.04 - page 257

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9082
Public exploits: 154
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 9082 vulnerabilities: 22 critical, 441 high, 1363 medium, 7254 low Critical High Medium Low

Vulnerabilities (9082)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113077 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-5994		 CWE-349 Medium
No
No
 - 21.07.2025 SB2025072109
SB2025072110
SB2025072330
and 35 more
#VU113031 - Cross-Site Request Forgery (CSRF)
CVE-2024-23831		 CWE-352 Medium
No
No
 - 17.07.2025 SB2025071790
SB2025071795
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112334 - Improper input validation
CVE-2025-38177		 CWE-20 Low
No
No
 - 05.07.2025 SB2025070562
SB2025071791
SB2025071899
and 68 more
#VU112190 - Server-Side Request Forgery (SSRF)
CVE-2025-1220		 CWE-918 Medium
No
No
 - 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 16 more
#VU112189 - NULL Pointer Dereference
CVE-2025-6491		 CWE-476 Medium
No
No
 - 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 18 more
#VU112187 - Error Handling
CVE-2025-1735		 CWE-388 Medium
No
No
 - 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 17 more
#VU111913 - Integer overflow
CVE-2024-23337		 CWE-190 Medium
No
No
 - 25.06.2025 SB2025032035
SB2025070824
SB2025070826
and 29 more
#VU111912 - Heap-based Buffer Overflow
CVE-2025-48060		 CWE-122 Medium
No
No
 - 25.06.2025 SB2025032035
SB2025070824
SB2025070826
and 38 more
#VU111243 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4748		 CWE-22 High
No
No
 - 17.06.2025 SB2025061756
SB2025061922
SB20250711173
and 3 more
#VU108847 - Expected Behavior Violation
CVE-2025-46712		 CWE-440 Low
No
No
 - 09.05.2025 SB2025050954
SB2025052336
SB2025052337
and 2 more
#VU108240 - Use After Free
CVE-2025-37750		 CWE-416 Low
No
No
 - 02.05.2025 SB20250502145
SB2025061222
SB2025061354
and 20 more
#VU105901 - Stack-based buffer overflow
CVE-2024-53427		 CWE-121 Medium
No
No
 - 20.03.2025 SB2025032035
SB2025060629
SB2025072105
and 2 more
#VU99654 - Missing Encryption of Sensitive Data
CVE-2021-3882		 CWE-311 Medium
No
No
 - 04.11.2024 SB2024110415
SB2024110416
SB2025071795
#VU56098 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3694		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082521
SB2021082523
SB2021093019
and 1 more
#VU56097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3693		 CWE-79 Low
No
No
 - 25.08.2021 SB2021082521
SB2021082523
SB2021093019
and 1 more
#VU56096 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-3731		 CWE-451 Low
No
No
 - 25.08.2021 SB2021082521
SB2021082523
SB2021093019
and 1 more


Showing elements 5121 - 5140 out of 9082