Skip to contentCanonical Ubuntu vulnerabilities
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5811Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5810Fix available8.8 High
- libraw, canonical ubuntu linux +1 moreAn error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5807Fix available8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...CVE-2018-14851Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango open redirectCVE-2018-14574Fix availableEPSS 25.5%6.1 Medium
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...CVE-2018-10916Fix available5.3 Medium
- x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause...CVE-2015-9262Fix available9.8 Critical
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5816Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5815Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18...CVE-2018-5813Fix available6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 morelibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...CVE-2018-14567Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to...CVE-2018-14734Fix available7.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14682Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad...CVE-2018-14681Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank...CVE-2018-14680Fix available6.5 Medium
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14679Fix available6.5 Medium
- debian linux, linux kernel, xen +1 more +3 moreAn issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The...CVE-2018-14678Fix available7.8 High
- qemu, canonical ubuntu linux, redhat enterprise linux +2 moreA stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before...CVE-2017-15118Public exploitFix availableEPSS 11.9%8.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference...CVE-2018-14617Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer...CVE-2018-14609Fix available5.5 Medium
- google chrome, canonical ubuntu linux +1 moreIncorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a...CVE-2018-6156Fix available8.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...CVE-2018-13988Fix available6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +1 more +3 moreThe host name verification missing in Apache TomcatCVE-2018-8034Fix availableEPSS 21.0%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoderCVE-2018-1336Fix availableEPSS 20.4%7.5 High
- bluez, canonical ubuntu linux +1 moreA bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth...CVE-2018-10910Fix available4.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable...CVE-2018-14551Fix available9.8 Critical
- [unknown] python-cryptography, canonical ubuntu linux, redhat openstack +2 morePyCA Cryptography vulnerable to GCM tag forgeryCVE-2018-10903Fix available7.5 High
- gnome evolution, canonical ubuntu linux +1 morecamel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server...CVE-2016-10727Fix available9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.CVE-2018-14437Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.CVE-2018-14436Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.CVE-2018-14435Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.CVE-2018-14434Fix available6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreNokogiri NULL Pointer DereferenceCVE-2018-14404Fix available7.5 High
- canonical ubuntu linux, webkitgtk webkitgtk\+ +1 moreWebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the...CVE-2018-12911Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-3077Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported...CVE-2018-3071Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)....CVE-2018-3070Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2018-3066Fix available3.3 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2018-3065Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3064Fix available7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-3063Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....CVE-2018-3062Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2018-3061Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3060Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported...CVE-2018-3058Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-3056Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-3054Fix available4.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2952Fix available3.7 Low
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not...CVE-2018-14362Fix available9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer...CVE-2018-14359Fix available9.8 Critical
- Show moreLoading…