Skip to contentCanonical Ubuntu vulnerabilities
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreUse-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders...CVE-2015-1220Fix available6.8 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in...CVE-2015-1219Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google...CVE-2015-1218Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener...CVE-2015-1217Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreUse-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core...CVE-2015-1216Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote...CVE-2015-1215Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters...CVE-2015-1214Fix available7.5 High
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...CVE-2015-0228Fix availableEPSS 16.9%5.0 Medium
- libarchive, canonical ubuntu linux, opensuse +2 moreAbsolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote...CVE-2015-2304Fix available6.4 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but...CVE-2015-0834Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and...CVE-2015-0832Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for...CVE-2015-0830Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...CVE-2015-0829Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote...CVE-2015-0826Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreStack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla...CVE-2015-0825Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before...CVE-2015-0824Fix available5.0 Medium
- mozilla firefox, opentype sanitiser project sanitiser, canonical ubuntu linux +1 more +3 moreMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...CVE-2015-0823Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...CVE-2015-0821Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...CVE-2015-0820Fix available2.6 Low
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...CVE-2015-0819Fix available4.3 Medium
- info-zip unzip, canonical ubuntu linux +1 moreBuffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows...CVE-2015-1315Fix available7.5 High
- gnupg, canonical ubuntu linux +1 morekbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not...CVE-2015-1607Fix available5.5 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12...CVE-2015-1572Fix available4.6 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12...CVE-2015-0247Fix available4.6 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 morebdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial...CVE-2014-9675Fix available5.0 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with...CVE-2014-9674Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +7 more +9 moreInteger signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType...CVE-2014-9673Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreArray index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows...CVE-2014-9672Fix available5.8 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 moreOff-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4...CVE-2014-9671Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to...CVE-2014-9669Fix available6.8 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length...CVE-2014-9668Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moresfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without...CVE-2014-9667Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows...CVE-2014-9665Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 morecff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation...CVE-2014-9662Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moretype42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete...CVE-2014-9661Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 High
- freetype, canonical ubuntu linux, fedoraproject fedora +2 more +4 morecff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with...CVE-2014-9659Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreThe tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not...CVE-2014-9656Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...CVE-2015-1212Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe OriginCanAccessServiceWorkers function in content/browser/service_worker...CVE-2015-1211Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...CVE-2015-1210Fix available5.0 Medium
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...CVE-2015-1209Fix available7.5 High
- gnu glibc, canonical ubuntu linux +1 moreThe ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21...CVE-2015-1473Fix available6.4 Medium
- linux kernel, canonical ubuntu linux +1 moreThe IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length...CVE-2015-1465Fix available7.8 High
- Show moreLoading…