Skip to contentCanonical Ubuntu vulnerabilities
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11047Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPCVE-2020-11046Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11045Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreDouble Free in FreeRDPCVE-2020-11044Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11042Fix available5.5 Medium
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...CVE-2020-6831Fix available9.8 Critical
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone does not check signature TTL of the EC2 credential auth methodCVE-2020-12692Fix available5.4 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project IDCVE-2020-12691Fix available8.8 High
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped contextCVE-2020-12689Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 75 and...CVE-2020-12395Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...CVE-2020-12392Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moregss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in...CVE-2020-12656Fix availableDisputed5.5 Medium
- saltstack salt, blackberry workspaces server, canonical ubuntu linux +3 more +5 moreSaltStack Salt is vulnerable Arbitrary Directory AccessCVE-2020-11652In KEVPublic exploitFix availableEPSS 86.4%6.5 Medium
- saltstack salt, canonical ubuntu linux, debian linux +2 more +4 moreSaltStack Salt Unauthenticated Remote Code ExecutionCVE-2020-11651In KEVPublic exploitFix availableEPSS 96.6%9.8 Critical
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- ffmpeg, canonical ubuntu linux, debian linux +2 morecbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow...CVE-2020-12284Fix available9.8 Critical
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...CVE-2020-12243Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...CVE-2020-11884Fix available7.0 High
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...CVE-2020-12137Fix available6.1 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest...CVE-2020-11945Fix availableEPSS 27.2%9.8 Critical
- libslirp project libslirp, canonical ubuntu linux, debian linux +2 more +4 morelibslirp: use after free vulnerability cause a denial of service.CVE-2020-1983Fix available7.5 High
- teeworlds, canonical ubuntu linux, debian linux +3 more +5 moreCServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote...CVE-2020-12066Fix available7.5 High
- linuxfoundation ceph, canonical ubuntu linux +1 moreAn issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can...CVE-2020-12059Fix available7.5 High
- re2c, canonical ubuntu linux +1 morere2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.CVE-2020-11958Fix available7.8 High
- git, canonical ubuntu linux, debian linux +1 more +3 moreMalicious URLs can still cause Git to send a stored credential to the wrong serverCVE-2020-11008Fix available4.0 Medium
- google android, canonical ubuntu linux +1 moreIn f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing...CVE-2020-0067Fix available4.4 Medium
- byobu, canonical ubuntu linux +1 moreByobu apport hook uploads user's ~/.screenrcCVE-2019-7306Fix available4.3 Medium
- canonical pulseaudio, ubuntu linux +1 moreUbuntu modifications to pulseaudio to provide snap security enforcement could be unloadedCVE-2020-11931Fix available3.3 Low
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +2 more +4 moreA use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted...CVE-2020-11793Fix available8.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled,...CVE-2019-12519Fix available9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its...CVE-2019-12520Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...CVE-2019-12521Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its...CVE-2019-12524Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2020-2930Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...CVE-2020-2925Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2924Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2923Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2904Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling...CVE-2020-2903Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2901Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). The...CVE-2020-2898Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2897Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-2896Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2895Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2893Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2892Fix available4.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2020-2830Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...CVE-2020-2816Fix available7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2020-2812Fix available4.9 Medium
- Show moreLoading…