Skip to contentCanonical Ubuntu vulnerabilities
- gnupg, canonical ubuntu linux +1 moreGnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in...CVE-2018-1000858Fix available8.8 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free...CVE-2018-6307Fix availableEPSS 26.5%8.1 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference...CVE-2018-20024Fix available7.5 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization...CVE-2018-20023Fix available7.5 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665:...CVE-2018-20022Fix available7.5 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop...CVE-2018-20021Fix available7.5 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write...CVE-2018-20020Fix available9.8 Critical
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound...CVE-2018-20019Fix available9.8 Critical
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write...CVE-2018-15127Fix availableEPSS 15.1%9.8 Critical
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free...CVE-2018-15126Fix availableEPSS 11.8%9.8 Critical
- qt, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.CVE-2018-19873Fix available9.8 Critical
- debian linux, linux kernel, [unknown] kernel: +3 more +5 moreA flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different...CVE-2018-16884Fix available6.5 Medium
- qemu, canonical ubuntu linux, fedoraproject fedora +2 morepvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.CVE-2018-20123Fix available5.5 Medium
- graphicsmagick, canonical ubuntu linux, debian linux +2 moreIn GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over...CVE-2018-20185Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size...CVE-2018-20169Fix available6.8 Medium
- qemu, canonical ubuntu linux, debian linux +2 more +4 morev9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash)...CVE-2018-19489Fix available4.7 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +3 more +5 moreA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in...CVE-2018-16872Fix available5.0 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +1 more +3 moreA flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in...CVE-2018-16867Fix available7.0 High
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...CVE-2018-20103Fix available7.5 High
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8...CVE-2018-20102Fix available7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...CVE-2018-18397Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreLimitations on the URIs allowed to WebExtensions by the browser.windows.create API can be...CVE-2018-18497Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...CVE-2018-18495Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur after deleting a selection element due to a weak...CVE-2018-18492Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2018-12407Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 63. Some...CVE-2018-12406Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 63 and...CVE-2018-12405Fix available9.8 Critical
- gnu binutils, canonical ubuntu linux, netapp vasa provider +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2018-19931Fix available7.8 High
- google chrome, canonical ubuntu linux, debian linux +7 more +9 moreAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...CVE-2018-18356Fix available8.8 High
- google android, linux kernel, canonical ubuntu linux +6 more +8 moreIn sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This...CVE-2018-9568Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related...CVE-2018-19854Fix available4.7 Medium
- wavpack, canonical ubuntu linux, debian linux +2 more +4 moreThe function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0...CVE-2018-19841Fix available5.5 Medium
- wavpack, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows...CVE-2018-19840Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA...CVE-2018-19824Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +2 moreA flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than...CVE-2018-19788Public exploitFix availableEPSS 11.6%8.8 High
- lxml, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in LXMLCVE-2018-19787Fix available6.1 Medium
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM...CVE-2018-8789Fix available7.5 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function...CVE-2018-8788Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...CVE-2018-8787Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...CVE-2018-8786Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux +1 moreFreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function...CVE-2018-8785Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux +1 moreFreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function...CVE-2018-8784Fix available9.8 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid...CVE-2018-18314Fix available9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +6 more +8 morePerl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers...CVE-2018-18313Fix available9.1 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18312Fix availableEPSS 12.8%9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18311Fix availableEPSS 11.7%9.8 Critical
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreSamba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of...CVE-2018-16851Fix available6.5 Medium
- Show moreLoading…