Skip to contentCanonical Ubuntu vulnerabilities
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- debian linux, python pillow, canonical ubuntu linux +1 more +3 moreUncontrolled Resource Consumption in PillowCVE-2019-19911Fix available7.5 High
- sqlite, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations...CVE-2019-19959Fix available7.5 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreInteger overflow in PillowCVE-2020-5310Fix available8.8 High
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreBuffer Copy without Checking Size of Input in PillowCVE-2020-5311Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 morePCX P mode buffer overflow in PillowCVE-2020-5312Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds Read in PillowCVE-2020-5313Fix available7.1 High
- sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...CVE-2019-20218Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c...CVE-2019-20096Fix available5.5 Medium
- vim, canonical ubuntu linux +1 moreThe autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.CVE-2019-20079Fix available7.8 High
- gnome networkmanager, canonical ubuntu linux, debian linux +2 more +4 moreIn NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in...CVE-2012-2736Fix available4.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreIn the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas...CVE-2019-19965Fix available4.7 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage...CVE-2019-19948Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage...CVE-2019-19949Fix available9.1 Critical
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB...CVE-2019-19947Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreAn exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3....CVE-2019-5108Fix availableEPSS 10.1%7.4 High
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache TomcatCVE-2019-12418Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreHeap-buffer-overflow READ in exifCVE-2019-11047Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 morekernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with...CVE-2019-19922Fix available5.5 Medium
- sa-exim project sa-exim, canonical ubuntu linux, debian linux +2 moresa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule....CVE-2019-19920Fix available8.8 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- debian edu, debian-lan-config, skolelinux debian-edu-config +2 more +4 moreDebian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu,...CVE-2019-3467Fix available7.8 High
- djangoproject django, canonical ubuntu linux +1 moreDjango Potential account hijack via password reset formCVE-2019-19844Public exploitFix availableEPSS 53.6%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some...CVE-2019-19816Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations...CVE-2019-19813Fix available5.5 Medium
- cyrus imap, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8...CVE-2019-19783Fix available6.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous...CVE-2019-19807Fix available7.8 High
- spip, canonical ubuntu linux, debian linux +2 more_core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject...CVE-2019-19830Fix available6.5 Medium
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 moresysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.CVE-2019-19725Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreOut of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13753Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreOut of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13752Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreUninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13751Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreInsufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13750Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...CVE-2019-14889Fix available7.1 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14870Fix available5.4 Medium
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14861Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreIn the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some...CVE-2019-19448Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- canonical ubuntu cobbler, cobbler +1 moreA Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu...CVE-2012-20925.9 Medium
- linux kernel, canonical ubuntu linux +1 morefpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when...CVE-2019-19602Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...CVE-2019-17012Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...CVE-2019-17011Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...CVE-2019-17010Fix available7.5 High
- Show moreLoading…