Skip to contentCanonical Ubuntu vulnerabilities
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14399Fix availableDisputed7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14400Fix availableDisputed7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds...CVE-2020-14402Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of...CVE-2020-14403Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds...CVE-2020-14404Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit...CVE-2020-14405Fix available6.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 morelibvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket...CVE-2019-20839Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a...CVE-2019-20840Fix available7.5 High
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- canonical ubuntu linux, isc bind, bind9 +2 more +4 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8618Fix available4.9 Medium
- mutt, canonical ubuntu linux +1 moreMutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt...CVE-2020-14154Fix available4.8 Medium
- mutt, canonical ubuntu linux, debian linux +1 more +3 moreMutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.CVE-2020-14093Fix available5.9 Medium
- packagekit, canonical ubuntu linux +1 morePackagekit's apt backend lets user install untrusted local packagesCVE-2020-16122Fix available8.2 High
- red hat openstack-cinder, canonical ubuntu linux +1 moreOpenstack cinder Improper handling of ScaleIO backend credentialsCVE-2020-10755Fix available6.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 more +4 moreAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...CVE-2020-10761Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 5.7.1. drivers/tty/vt/keyboard.c has an...CVE-2020-13974Fix available7.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...CVE-2020-12398Fix available7.5 High
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 moreA flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows...CVE-2020-10732Fix available3.3 Low
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...CVE-2020-0543Fix available5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...CVE-2020-0198Public exploitFix available7.5 High
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...CVE-2020-12695Public exploitFix availableEPSS 15.2%7.5 High
- debian linux, linuxtv xawtv, canonical ubuntu linux +3 more +5 moreAn issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does...CVE-2020-13696Fix available4.4 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because...CVE-2020-13904Fix available5.5 Medium
- pam tacplus project tacplus, arista cloudvision portal, canonical ubuntu linux +1 more +3 moreIn support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog...CVE-2020-13881Fix available7.5 High
- freedesktop dbus, canonical ubuntu linux +1 moreCVE-2020-12049 does not affect BellSoft softwareCVE-2020-12049Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 morerom_copy() in hw/core/loader.c in QEMU 4.1.0 does not validate the relationship between two...CVE-2020-13765Fix available5.6 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...CVE-2020-13800Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...CVE-2020-10757Public exploitFix available7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and...CVE-2019-20811Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...CVE-2020-12410Fix available8.8 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 morego7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not...CVE-2019-20810Fix available5.5 Medium
- websocket-extensions project websocket-extensions, canonical ubuntu linux, debian linux +2 moreRegular Expression Denial of Service in websocket-extensions (RubyGem)CVE-2020-7663Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 morehw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...CVE-2020-13754Fix available6.7 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...CVE-2020-13659Fix available2.5 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...CVE-2020-12406Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...CVE-2020-12405Fix available5.3 Medium
- python-rsa project python-rsa, canonical ubuntu linux, fedoraproject fedora +2 morePython-RSA decryption of ciphertext leads to DoSCVE-2020-13757Fix available7.5 High
- sane-project sane backends, canonical ubuntu linux, debian linux +2 more +4 moreA NULL pointer dereference in sanei_epson_net_read in SANE Backends through 1.0.29 allows a...CVE-2020-12867Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...CVE-2020-13362Fix available3.2 Low
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...CVE-2020-13361Fix available3.9 Low
- vim, apple mac os x, canonical ubuntu linux +4 more +6 moreIn Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS...CVE-2019-20807Fix available5.3 Medium
- gnome balsa, glib-networking, broadcom fabric operating system +3 more +5 moreIn GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...CVE-2020-13645Fix available6.5 Medium
- sympa, canonical ubuntu linux, debian linux +1 more +3 moreSympa before 6.2.56 allows privilege escalation.CVE-2020-10936Fix available7.8 High
- phpmailer project phpmailer, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient output escaping of attachment names in PHPMailerCVE-2020-13625Fix available7.5 High
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 High
- sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...CVE-2020-13631Fix available5.5 Medium
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 Medium
- Show moreLoading…