Known vulnerabilities in Ubuntu 24.04 - page 273

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9082
Public exploits: 154
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 9082 vulnerabilities: 22 critical, 441 high, 1363 medium, 7254 low Critical High Medium Low

Vulnerabilities (9082)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111970 - Expected Behavior Violation
CVE-2025-4435		 CWE-440 Low
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718		 CWE-22 Medium
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138		 CWE-59 High
Public exploit available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330		 CWE-59 High
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Public exploit available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 - 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU111389 - Improper Access Control
CVE-2025-6020		 CWE-284 Low
No
No
 - 19.06.2025 SB2025061987
SB2025061992
SB20250619103
and 69 more
#VU111385 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-6019		 CWE-362 Low
Public exploit available
No
 - 19.06.2025 SB2025061983
SB2025061988
SB2025061989
and 21 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 - 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU110003 - Deserialization of Untrusted Data
CVE-2025-49113		 CWE-502 High
Public exploit available
Exploited
 - 01.06.2025 SB2025060101
SB2025060331
SB2025060332
and 4 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Public exploit available
No
 - 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU103932 - Missing release of memory after effective lifetime
CVE-2025-22866		 CWE-401 Low
No
No
 - 12.02.2025 SB20250212100
SB20250212101
SB20250212102
and 27 more
#VU103457 - Improper input validation
CVE-2024-45341		 CWE-20 Low
No
No
 - 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 23 more
#VU103455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45336		 CWE-200 Low
No
No
 - 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 38 more
#VU101113 - Race Condition within a Thread
CVE-2024-53124		 CWE-366 Low
No
No
 - 03.12.2024 SB2024120319
SB2025011049
SB2025020805
and 53 more
#VU100079 - Improper Locking
CVE-2024-50157		 CWE-667 Low
No
No
 - 07.11.2024 SB2024110767
SB2024112952
SB2024121502
and 15 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 - 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 - 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Public exploit available
No
 - 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU24676 - Double Free
CVE-2019-2126		 CWE-415 High
No
No
 - 27.01.2020 SB2019082018
SB2019092728
SB2020012713
and 4 more


Showing elements 5441 - 5460 out of 9082