Skip to contentCanonical Ubuntu vulnerabilities
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- linux kernel, canonical ubuntu linux +1 moreThe xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before...CVE-2016-7913Fix available7.8 High
- xmlsoft libxml2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreCVE-2016-9318 does not affect BellSoft softwareCVE-2016-9318Fix available5.5 Medium
- moinmo moinmoin, canonical ubuntu linux, debian linux +2 moreMoinMoin Cross-site Scripting (XSS) vulnerabilityCVE-2016-9119Fix available6.1 Medium
- cryptography.io cryptography, canonical ubuntu linux, fedoraproject fedora +2 moreImproper input validation in cryptographyCVE-2016-9243Fix available7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango DNS Rebinding VulnerabilityCVE-2016-9014Fix available8.1 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango user with hardcoded password created when running tests on OracleCVE-2016-9013Fix available9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...CVE-2016-5195In KEVPublic exploitFix availableEPSS 83.5%7.0 High
- linux kernel, canonical ubuntu linux +1 moreThe arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel...CVE-2016-7425Fix available7.8 High
- systemd project systemd, canonical ubuntu linux +1 moreThe manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause...CVE-2016-7795Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel...CVE-2016-7117Fix availableEPSS 23.6%9.8 Critical
- c-ares, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows...CVE-2016-5180Public exploitFix available9.8 Critical
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango CSRF Protection BypassCVE-2016-7401Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreThe format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote...CVE-2016-7045Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreThe unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when...CVE-2016-7044Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...CVE-2016-6306Fix availableEPSS 41.7%5.9 Medium
- file roller project roller, canonical ubuntu linux +1 moreThe _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows...CVE-2016-7162Fix available7.5 High
- gnome eye of gnome, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreEye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...CVE-2016-6855Public exploitFix availableEPSS 18.4%7.5 High
- gnupg, gnupg libgcrypt, canonical ubuntu linux +1 more +3 moreThe mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6...CVE-2016-6313Fix available5.3 Medium
- fontconfig project fontconfig, canonical ubuntu linux, debian linux +1 more +3 morefontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary...CVE-2016-5384Fix available7.8 High
- haxx libcurl, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...CVE-2016-5421Fix available8.1 High
- nettle project nettle, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys...CVE-2016-6489Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...CVE-2016-5403Fix available5.5 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse leap +1 more +3 moreThe OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a...CVE-2016-6352Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP...CVE-2016-6351Fix available6.7 Medium
- perl, canonical ubuntu linux, debian linux +2 more +4 moreThe XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a...CVE-2016-6185Fix available7.8 High
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- canonical ubuntu linux, ecryptfs ecryptfs-utils +1 moreecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from...CVE-2015-8946Fix available3.3 Low
- gnu libidn, canonical ubuntu linux, opensuse leap +1 more +3 moreidn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by...CVE-2016-6262Fix available7.5 High
- gnu libidn, canonical ubuntu linux, opensuse leap +2 moreThe idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent...CVE-2016-6261Fix available7.5 High
- mariadb, oracle mysql, canonical ubuntu linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-5440Fix available4.9 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-5439Fix available4.9 Medium
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3615Fix available5.3 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-3614Fix available5.3 Medium
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3521Fix availableEPSS 10.4%6.5 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-3501Fix available6.5 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-3486Fix available6.5 Medium
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3477Fix available8.1 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- canonical ubuntu linux, kde karchives +1 moreDirectory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows...CVE-2016-6232Fix available7.5 High
- canonical ubuntu linux, ecryptfs ecryptfs-utils +1 moreecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating...CVE-2016-6224Fix available3.3 Low
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 moreMemory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote...CVE-2014-9842Fix available7.5 High
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreThe gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2...CVE-2016-6128Fix available7.5 High
- libreoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute...CVE-2016-4324Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid...CVE-2016-5829Fix available7.8 High
- Show moreLoading…