Skip to contentCanonical Ubuntu vulnerabilities
- apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 moreThe HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4...CVE-2015-1774Fix available6.8 Medium
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement...CVE-2015-3415Fix available7.5 High
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle...CVE-2015-3416Fix available7.5 High
- sqlite, apple mac os x, watchos +3 more +5 moreSQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which...CVE-2015-3414Fix available7.5 High
- canonical ubuntu linux, module-signature project module-signature +1 moreUntrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain...CVE-2015-3409Fix available7.2 High
- canonical ubuntu linux, module-signature project module-signature +1 moreModule::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a...CVE-2015-3408Fix available10.0 High
- canonical ubuntu linux, module-signature project module-signature +1 moreModule::Signature before 0.74 allows remote attackers to bypass signature verification for files...CVE-2015-3407Fix available5.0 Medium
- canonical ubuntu linux, module-signature project module-signature +1 moreThe PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the...CVE-2015-3406Fix available7.5 High
- haxx curl, libcurl, apple mac os x +6 more +8 moreThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...CVE-2015-3145Fix availableEPSS 30.5%7.5 High
- haxx curl, libcurl, canonical ubuntu linux +2 more +4 moreThe fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate...CVE-2015-3144Fix availableEPSS 10.5%9.0 High
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...CVE-2015-1863Fix available5.8 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome...CVE-2015-3333Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to...CVE-2015-1249Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreThe URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42...CVE-2015-1244Fix available5.0 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreThe ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4...CVE-2015-1242Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreGoogle Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation...CVE-2015-1241Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moregpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0...CVE-2015-1240Fix available5.0 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moreSkia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of...CVE-2015-1238Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content...CVE-2015-1237Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreThe MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode...CVE-2015-1236Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moreThe ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in...CVE-2015-1235Fix available5.0 Medium
- openstack swift, canonical ubuntu linux +1 moreOpenStack Swift Unauthorized delete of versioned Swift objectCVE-2015-1856Fix available5.5 Medium
- openstack keystonemiddleware, python-keystoneclient, canonical ubuntu linux +2 moreOpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacksCVE-2015-1852Fix available4.3 Medium
- canonical ubuntu linux, debian linux, point-to-point protocol project protocol +2 moreBuffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4...CVE-2015-3310Fix available4.3 Medium
- debian dpkg, canonical ubuntu linux +1 moreThe dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote...CVE-2015-0840Fix available4.3 Medium
- x.org libx11, x11, canonical ubuntu linux +1 more +3 moreMultiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint...CVE-2013-7439Fix available7.5 High
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers...CVE-2015-1317Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly...CVE-2015-2925Public exploitFix available6.9 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...CVE-2015-0799Fix available4.3 Medium
- canonical ubuntu linuxThe Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04...CVE-2015-1319Fix available2.1 Low
- gnu mailman, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,...CVE-2015-2775Fix available7.6 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...CVE-2015-0812Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain...CVE-2015-0811Fix available6.4 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...CVE-2015-0808Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...CVE-2015-0806Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...CVE-2015-0805Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0804Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0803Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 relies on docshell type information instead of page principal...CVE-2015-0802Public exploitFix availableEPSS 65.0%5.0 Medium
- xen, canonical ubuntu linux, debian linux +1 more +3 moreQEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command...CVE-2015-2756Fix available4.9 Medium
- gnu glibc, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 moreDB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc...CVE-2014-8121Fix available5.0 Medium
- apache batik, canonical ubuntu linux, redhat jboss enterprise brms platform +2 moreImproper Input Validation in Apache BatikCVE-2015-0250Fix availableEPSS 16.6%6.4 Medium
- python requests, canonical ubuntu linux, mageia project mageia +2 morePython Requests Session FixationCVE-2015-2296Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux +1 moreThe remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote...CVE-2015-2265Fix available7.5 High
- apache standard taglibs, canonical ubuntu linux +1 moreXXE in Apache Standard TaglibsCVE-2015-0254Fix availableEPSS 12.0%7.5 High
- google chrome, v8, canonical ubuntu linux +2 moreMultiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome...CVE-2015-2238Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to...CVE-2015-1231Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in...CVE-2015-1230Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 morenet/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a...CVE-2015-1229Fix available5.0 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used...CVE-2015-1228Fix available7.5 High
- Show moreLoading…