Skip to contentCanonical Ubuntu vulnerabilities
- linux kernel, canonical ubuntu linux +1 moreOff-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the...CVE-2014-9683Fix available3.6 Low
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...CVE-2014-9529Fix available6.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat...CVE-2014-8159Fix available6.9 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise server +2 moreThe pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not...CVE-2014-7970Fix available5.5 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6054Fix available4.3 Medium
- libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6053Fix available5.0 Medium
- libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreThe HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier...CVE-2014-6052Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, oracle solaris +2 moreThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...CVE-2014-7142Fix availableEPSS 24.9%6.4 Medium
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...CVE-2015-1779Fix available8.6 High
- libvirt, canonical ubuntu linux +1 moreThe qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk...CVE-2014-3633Fix available5.8 Medium
- python requests, canonical ubuntu linux, debian linux +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in RequestsCVE-2014-1829Fix available5.0 Medium
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- gnome gtk, canonical ubuntu, linuxmint linux mint +2 moreGTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other...CVE-2014-1949Fix available7.2 High
- net-snmp, apple mac os x, canonical ubuntu linux +2 moresnmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers...CVE-2014-3565Fix available5.0 Medium
- procmail, canonical ubuntu linux +1 moreHeap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to...CVE-2014-3618Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +3 more +5 moreDjango cross-site scripting (XSS) attack via user-supplied redirect URLsCVE-2015-2317Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreDjango Denial-of-service possibility with strip_tagsCVE-2015-2316Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango database denial-of-service with ModelMultipleChoiceFieldCVE-2015-0222Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango DoS in django.views.static.serveCVE-2015-0221Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Cross-site Scripting VulnerabilityCVE-2015-0220Fix available4.3 Medium
- lua, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows...CVE-2014-5461Fix availableEPSS 12.0%5.0 Medium
- qemu, canonical ubuntu linux +1 moreOff-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in...CVE-2014-5388Fix available4.6 Medium
- canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance improper validation of the image_size_cap configuration optionCVE-2014-5356Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2573Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-2571Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2568Fix available5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0505Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0501Fix availableEPSS 10.3%5.7 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0499Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0441Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0433Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated...CVE-2015-0432Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2015-0411Fix available7.5 High
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0382Fix availableEPSS 10.1%4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0381Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0374Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2014-6568Fix available3.5 Low
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Domain-scoped tokens don't get revokedCVE-2014-5253Fix available4.9 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation eventsCVE-2014-5252Fix available4.9 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Identity (Keystone) Multiple vulnerabilities in revocation eventsCVE-2014-5251Fix available4.9 Medium
- linux kernel, canonical ubuntu linux +1 morefs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV,...CVE-2014-5207Public exploitFix available6.2 Medium
- linux kernel, canonical ubuntu linux +1 moreThe do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain...CVE-2014-5206Fix available7.2 High
- apache subversion, apple xcode, canonical ubuntu linux +1 more +3 moreThe Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10...CVE-2014-3522Fix available4.0 Medium
- serf project serf, apache subversion, canonical ubuntu linux +2 moreThe (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate...CVE-2014-3504Fix available4.0 Medium
- apache subversion, apple xcode, canonical ubuntu linux +6 more +8 moreApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of...CVE-2014-3528Fix available4.0 Medium
- gnu gpgme, canonical ubuntu linux, debian linux +2 moreMultiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2)...CVE-2014-3564Fix available6.8 Medium
- samba, canonical ubuntu linux, redhat enterprise linux +2 moreNetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows...CVE-2014-3560Fix availableEPSS 56.4%7.9 High
- apple cups, canonical ubuntu linux +1 moreThe web interface in CUPS before 2.0 does not check that files have world-readable permissions,...CVE-2014-5031Fix available5.0 Medium
- apple cups, canonical ubuntu linux +1 moreCUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html...CVE-2014-5030Fix available1.9 Low
- Show moreLoading…