Skip to contentCanonical Ubuntu vulnerabilities
- apple cups, canonical ubuntu linux +1 moreThe web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a...CVE-2014-5029Fix available1.5 Low
- kde kauth, kdelibs, canonical ubuntu linux +1 more +3 moreKDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a...CVE-2014-5033Fix available6.9 Medium
- canonical acpi-support, ubuntu linux +1 moreRace condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows...CVE-2014-1419Fix available6.9 Medium
- gnu libtasn1, canonical ubuntu linux, debian linux +1 more +3 moreStack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers...CVE-2015-2806Fix available10.0 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +4 more +6 moreOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...CVE-2014-4975Fix available5.0 Medium
- apple cups, canonical ubuntu linux, fedoraproject fedora +2 moreThe web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files...CVE-2014-3537Fix available1.2 Low
- transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreInteger overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission...CVE-2014-4909Fix available6.8 Medium
- openstack neutron, oslo, pycadf +3 more +5 moreThe notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2...CVE-2014-4615Fix available5.0 Medium
- linux kernel, canonical ubuntu linux +1 moremm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between...CVE-2014-4171Fix available4.7 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 High
- openstack neutron, canonical ubuntu linux +1 moreThe L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2...CVE-2014-4167Fix available3.5 Low
- canonical ubuntu linuxThe OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0...CVE-2013-1068Fix available5.0 Medium
- chkrootkit, canonical ubuntu linux +1 moreThe slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows...CVE-2014-0476Public exploitFix available3.7 Low
- openstack neutron, canonical ubuntu linux +1 moreThe default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not...CVE-2013-6433Fix available7.6 High
- redhat sos, canonical ubuntu linux +1 moresosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive...CVE-2014-3925Fix available5.0 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a...CVE-2015-2668Fix available5.0 Medium
- rxspencer project rxspencer, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka...CVE-2015-2305Fix available6.8 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted...CVE-2015-2222Fix available5.0 Medium
- clamav, canonical ubuntu linux +1 moreClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a...CVE-2015-2221Fix available5.0 Medium
- clamav, canonical ubuntu linux +1 moreThe upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service ...CVE-2015-2170Fix available5.0 Medium
- canonical ubuntu linux, gdm-guest-session project gdm-guest-session +1 moregdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04...CVE-2012-66482.1 Low
- canonical ubuntu linux, robert ancell lightdm +1 moredebian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7...CVE-2012-0943Public exploit2.1 Low
- canonical ltsp display manager, ubuntu linux +1 moreThe default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote...CVE-2012-116610.0 High
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Allows Open RedirectsCVE-2014-3730Fix available4.3 Medium
- x libxfont, canonical ubuntu linux, debian linux +2 moreThe bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x...CVE-2015-1803Fix available8.5 High
- strongswan, strongswan vpn client, canonical ubuntu linux +1 more +3 morestrongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP...CVE-2015-4171Fix available2.6 Low
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to Cache PoisoningCVE-2014-1418Fix available6.4 Medium
- canonical software-properties, ubuntu linux +1 moreppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when...CVE-2011-4407Fix available4.3 Medium
- x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3)...CVE-2014-0211Fix available7.5 High
- x libxfont, canonical ubuntu linux +1 moreMultiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow...CVE-2014-0210Fix available7.5 High
- x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org...CVE-2014-0209Fix available4.6 Medium
- qt, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service ...CVE-2014-0190Fix available4.3 Medium
- ayatana project unity, canonical ubuntu linux +1 moreUnity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which...CVE-2014-3204Fix available4.4 Medium
- ayatana project unity, canonical ubuntu linux +1 moreUnity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when...CVE-2014-32034.4 Medium
- canonical ubuntu linuxThe Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10...CVE-2013-7374Fix available4.6 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows...CVE-2014-1526Fix available6.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before...CVE-2014-1525Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1522Fix available9.3 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and...CVE-2014-1519Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- debian dpkg, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x...CVE-2014-0471Fix available5.0 Medium
- openstack neutron, canonical ubuntu linux, opensuse +2 moreThe openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...CVE-2014-0187Fix available9.0 High
- Show moreLoading…