Skip to contentCanonical Ubuntu vulnerabilities
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS...CVE-2016-4454Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS...CVE-2016-4453Fix available4.4 Medium
- canonical lxd, ubuntu linux +1 morelxd vulnerabilitiesCVE-2016-1582Fix available5.5 Medium
- canonical lxd, ubuntu linux +1 morelxd vulnerabilitiesCVE-2016-1581Fix available5.5 Medium
- f5 nginx, canonical ubuntu linux, debian linux +2 moreos/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to...CVE-2016-4450Fix availableEPSS 16.4%7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to...CVE-2016-1695Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreWebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704...CVE-2016-1692Fix available5.3 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreSkia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows...CVE-2016-1691Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome...CVE-2016-1689Fix available6.5 Medium
- google chrome, v8, canonical ubuntu linux +7 more +9 moreThe regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in...CVE-2016-1688Fix available6.5 Medium
- google chrome, xmlsoft libxslt, canonical ubuntu linux +7 more +9 morenumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles...CVE-2016-1683Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules...CVE-2016-1682Fix available6.1 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreUse-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome...CVE-2016-1680Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google...CVE-2016-1679Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreobjects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not...CVE-2016-1678Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreuri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an...CVE-2016-1677Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1675Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1673Fix available8.8 High
- graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 moreThe OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...CVE-2016-5118Fix availableEPSS 50.0%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter...CVE-2016-5107Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID...CVE-2016-5106Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS...CVE-2016-5105Fix available4.4 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support,...CVE-2016-4952Fix available6.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...CVE-2016-4449Fix available7.1 High
- xmlsoft libxml2, apple iphone os, itunes +8 more +10 moreThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...CVE-2016-4447Fix availableEPSS 14.0%7.5 High
- linux kernel, oracle linux, canonical ubuntu linux +2 moreThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not...CVE-2016-4951Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +3 more +5 moreThe get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5...CVE-2016-4913Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +9 more +11 moreUse-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2...CVE-2016-4805Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to...CVE-2016-4794Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +2 morefs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree...CVE-2016-4581Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5...CVE-2016-4580Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moresound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures...CVE-2016-4578Public exploitFix available5.5 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not...CVE-2016-4569Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write...CVE-2016-4565Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows...CVE-2016-4558Public exploitFix available7.0 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does...CVE-2016-4486Public exploitFix available3.3 Low
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +2 more +4 moreThe llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not...CVE-2016-4485Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does...CVE-2016-4482Fix available6.2 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU...CVE-2016-4441Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in...CVE-2016-4439Fix available6.7 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...CVE-2016-1840Fix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1839Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...CVE-2016-1838Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...CVE-2016-1837Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...CVE-2016-1836Fix available5.5 Medium
- apple iphone os, mac os x, canonical ubuntu linux +1 more +3 moreUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...CVE-2016-1835Fix available8.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...CVE-2016-1834Public exploitFix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1833Fix available5.5 Medium
- canonical ubuntu linux, libexpat project libexpat, mcafee policy auditor +1 more +3 moreThe overflow protection in Expat is removed by compilers with certain optimization settings,...CVE-2016-4472Fix availableEPSS 11.9%8.1 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- Show moreLoading…