Known vulnerabilities in Ubuntu 24.04 - page 399

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 24.04
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 9083
Public exploits: 154
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 24.04 Ubuntu 24.04 is affected by 9083 vulnerabilities: 22 critical, 441 high, 1364 medium, 7254 low Critical High Medium Low

Vulnerabilities (9083)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97965 - Improper Access Control
CVE-2024-44082		 CWE-284 Low
No
No
 - 02.10.2024 SB2024100260
SB2024100261
SB2024100262
and 10 more
#VU97748 - Improper input validation
CVE-2024-8925		 CWE-20 Medium
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97747 - Insufficient Logging
CVE-2024-9026		 CWE-778 Low
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024101209
and 13 more
#VU97746 - Security Features
CVE-2024-8927		 CWE-254 Medium
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97745 - Improper input validation
CVE-2024-47175		 CWE-20 High
Public exploit available
No
 - 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU97743 - Missing Authorization
CVE-2024-47176		 CWE-862 High
Public exploit available
No
 - 27.09.2024 SB2024092713
SB2024092715
SB2024092716
and 43 more
#VU97742 - Improper input validation
CVE-2024-47076		 CWE-20 High
Public exploit available
No
 - 27.09.2024 SB2024092712
SB2024092714
SB2024092715
and 27 more
#VU97707 - Improper input validation
CVE-2024-39844		 CWE-20 High
Public exploit available
No
 - 25.09.2024 SB2024092545
SB2024092546
SB2024092547
and 5 more
#VU97643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-45614		 CWE-444 Medium
No
No
 - 23.09.2024 SB2024092330
SB2024092459
SB2024092476
and 9 more
#VU97424 - Observable discrepancy
CVE-2024-23984		 CWE-203 Low
No
No
 - 17.09.2024 SB2024091724
SB2024091725
SB2024091726
and 20 more
#VU97423 - State Issues
CVE-2024-24968		 CWE-371 Low
No
No
 - 17.09.2024 SB2024091723
SB2024091725
SB2024091726
and 18 more
#VU96554 - Incorrect Default Permissions
CVE-2023-49582		 CWE-276 Low
No
No
 - 26.08.2024 SB2024082682
SB2024082937
SB2024082938
and 21 more
#VU96494 - Heap-based Buffer Overflow
CVE-2024-43802		 CWE-122 Low
No
No
 - 26.08.2024 SB2024082602
SB2024083027
SB2024083028
and 13 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 - 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Public exploit available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 - 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72574 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48338		 CWE-78 Low
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 14 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 - 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU69808 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45939		 CWE-78 High
No
No
 - 01.12.2022 SB2022120142
SB2022120148
SB2022120149
and 23 more


Showing elements 7961 - 7980 out of 9083