Skip to contentCanonical Ubuntu vulnerabilities
- canonical ubuntu linuxThe Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows...CVE-2018-18653Fix available7.8 High
- x.org x server, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath...CVE-2018-14665Public exploitFix availableEPSS 27.2%6.6 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...CVE-2018-12403Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe internal WebBrowserPersist code does not use correct origin context for a resource being...CVE-2018-12402Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreSome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...CVE-2018-12401Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen a new protocol handler is registered, the API accepts a title argument which can be used to...CVE-2018-12399Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...CVE-2018-12398Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA WebExtension can request access to local files without the warning prompt stating that the...CVE-2018-12397Fix available7.1 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where a WebExtension can run content scripts in disallowed contexts following...CVE-2018-12396Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...CVE-2018-12395Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability was found in 32-bit builds where an integer overflow during the...CVE-2018-12393Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreWhen manipulating user events in nested loops while opening a document through script, it is...CVE-2018-12392Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 62 and...CVE-2018-12390Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....CVE-2018-12389Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 62. Some...CVE-2018-12388Fix available8.8 High
- kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 morechmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'...CVE-2018-18585Fix available4.3 Medium
- cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 moreIn mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input...CVE-2018-18584Fix available6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreLibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0...CVE-2018-18557Public exploitFix availableEPSS 15.0%8.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreDivide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174...CVE-2018-18521Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils...CVE-2018-18520Fix available6.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...CVE-2018-18284Fix availableEPSS 16.3%8.6 High
- canonical ltd. linux kernel, as used in ubuntu 18.04 lts and ubuntu 18.10, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain...CVE-2018-6559Fix available3.3 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreIn the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation...CVE-2018-18445Fix available7.8 High
- digitalcorpora tcpflow, canonical ubuntu linux, fedoraproject fedora +2 moreA stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received...CVE-2018-18409Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moredrivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to...CVE-2018-18386Fix available3.3 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3284Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging)....CVE-2018-3283Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage...CVE-2018-3282Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR)....CVE-2018-3278Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3277Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....CVE-2018-3276Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3251Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge)....CVE-2018-3247Fix available5.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3214Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3200Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-3187Fix available5.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3185Fix available5.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3183Fix available9.0 Critical
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3180Fix available5.6 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-3174Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3173Fix available4.9 Medium
- canonical ubuntu linux, debian linux, hp xp7 command view +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-3169Fix available8.3 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3162Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3156Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2018-3155Fix available7.7 High
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3149Fix available8.3 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-3144Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3143Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3139Fix available3.1 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3136Fix available3.4 Low
- Show moreLoading…