Skip to contentCanonical Ubuntu vulnerabilities
- linux kernel, canonical ubuntu linux +1 moredrivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer...CVE-2019-15099Fix available7.5 High
- nokogiri, canonical ubuntu linux, debian linux +2 moreNokogiri Command Injection VulnerabilityCVE-2019-5477Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2019-3003Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported...CVE-2019-2969Fix available6.2 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2950Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2948Fix available4.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...CVE-2019-12854Fix availableEPSS 11.7%7.5 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient URL encoding flaw in allowed script location checkCVE-2019-9852Fix available7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreLogo global-event script executionCVE-2019-9851Public exploitFix availableEPSS 77.8%9.8 Critical
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient url validation allowing LibreLogo script executionCVE-2019-9850Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the...CVE-2019-15090Fix available6.7 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 26.3%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 83.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- bluetooth br/edr, apple iphone os, mac os x +145 more +147 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiationCVE-2019-9506Public exploitFix available7.6 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference...CVE-2019-15216Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound...CVE-2019-15214Fix available6.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a...CVE-2017-18509Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero...CVE-2019-14981Fix available6.5 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_process_user_comment in EXIF extensionCVE-2019-11042Fix available4.8 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_scan_thumbnail in EXIF extensionCVE-2019-11041Fix available4.8 Medium
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 moreThe implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are...CVE-2019-13377Fix available5.9 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may...CVE-2019-14763Fix available5.5 Medium
- kde kconfig, canonical ubuntu linux, debian linux +5 more +7 moreIn KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...CVE-2019-14744Fix available7.8 High
- openstack nova, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Nova Server Resource Faults Leak External Exception DetailsCVE-2019-14433Fix available6.5 Medium
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +2 moreModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap...CVE-2019-14497Fix available7.8 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +2 moreLoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer...CVE-2019-14496Fix available7.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the...CVE-2019-14494Fix available7.5 High
- freetds, canonical ubuntu linux +1 moreFreeTDS through 1.1.11 has a Buffer Overflow.CVE-2019-13508Fix available9.8 Critical
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +1 more +3 moreXMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.CVE-2019-14464Fix available5.5 Medium
- gnu binutils, canonical ubuntu linux, netapp hci management node +2 more +4 moreapply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows...CVE-2019-14444Fix available5.5 Medium
- sigil-ebook sigil, canonical ubuntu linux, flightcrew project flightcrew +2 moreSigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary...CVE-2019-14452Fix available7.5 High
- docker docker-credential-helpers, canonical ubuntu linux, docker credential helpers +1 more +3 moredocker-credential-helpers before 0.6.3 has a double free in the List functions.CVE-2019-1020014Fix available5.5 Medium
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session...CVE-2019-13565Fix available7.5 High
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator...CVE-2019-13057Fix available4.9 Medium
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32....CVE-2019-14250Fix available5.5 Medium
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +4 more +6 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported...CVE-2019-2842Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2816Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +9 more +11 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2786Fix available3.4 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2769Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2762Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +5 more +7 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported...CVE-2019-2745Fix available5.1 Medium
- gnome pango, canonical ubuntu linux, debian linux +10 more +12 moreGnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...CVE-2019-1010238Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2819Fix available5.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2805Fix available6.5 Medium
- Show moreLoading…