Skip to contentCanonical Ubuntu vulnerabilities
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- canonical ubuntu linux, debian linux, intel 7265 firmware +12 more +14 moreOut of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an...CVE-2020-0569Fix available5.7 Medium
- [unknown] ceph, canonical ubuntu linux, opensuse leap +1 more +3 moreA flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An...CVE-2020-1700Fix available6.5 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- netty, canonical ubuntu linux, debian linux +3 more +5 moreHTTP Request Smuggling in NettyCVE-2019-20444Fix available9.1 Critical
- netty, apache spark, canonical ubuntu linux +4 more +6 moreHTTP Request Smuggling in NettyCVE-2019-20445Fix availableEPSS 13.8%9.1 Critical
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...CVE-2020-7247In KEVPublic exploitFix availableEPSS 99.0%9.8 Critical
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...CVE-2020-0549Fix available5.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an...CVE-2019-20421Fix available7.5 High
- apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 moreInsecure Deserialization in Apache XML-RPCCVE-2019-17570Public exploitFix availableEPSS 49.3%9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...CVE-2020-7040Fix available8.1 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...CVE-2019-20386Fix available2.4 Low
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 Medium
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +1 more +3 moreThere is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4...CVE-2019-14902Fix available5.4 Medium
- saltstack salt, canonical ubuntu linux, debian linux +1 more +3 moreSaltStack Salt is vulnerable to command injectionCVE-2019-17361Fix availableEPSS 15.1%9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-2694Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2686Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2679Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2660Fix available4.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2020-2627Fix available6.5 Medium
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2589Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2020-2588Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2020-2584Fix available4.4 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2579Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2577Fix available4.9 Medium
- oracle mysql, canonical ubuntu linux, mariadb +6 more +8 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2574Fix available5.9 Medium
- oracle mysql, canonical ubuntu linux, netapp active iq unified manager +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2573Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin)....CVE-2020-2572Fix available2.7 Low
- oracle mysql, canonical ubuntu linux, oracle corporation mysql server +2 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2570Fix available5.9 Medium
- intel intel(r) processors, canonical ubuntu linux, intel atom e3805 +443 more +445 moreInsufficient control flow in certain data structures for some Intel(R) Processors with Intel(R)...CVE-2019-14615Public exploitFix available5.5 Medium
- pysaml2 project pysaml2, canonical ubuntu linux, debian linux +2 moreImproper Verification of Cryptographic Signature in PySAML2CVE-2020-5390Fix available7.5 High
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreNGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as...CVE-2019-20372Public exploitFix availableEPSS 15.0%5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...CVE-2019-17026In KEVPublic exploitFix availableEPSS 46.3%8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...CVE-2019-17025Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 moreAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...CVE-2019-17023Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17022Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf an XML file is served with a Content Security Policy and the XML file includes an XSL...CVE-2019-17020Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreDue to a missing case handling object types, a type confusion vulnerability could occur,...CVE-2019-17017Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17016Fix available6.1 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- Show moreLoading…