Skip to contentCanonical Ubuntu Linux vulnerabilities
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...CVE-2008-27267.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...CVE-2008-27257.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...CVE-2008-26647.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...CVE-2008-266310.0 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...CVE-2008-266210.0 High
- php, canonical ubuntu linux +1 morephp_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow...CVE-2008-2829Fix available5.0 Medium
- vim, canonical ubuntu linux +1 moreVim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary...CVE-2008-2712Public exploitFix availableEPSS 15.0%9.3 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...CVE-2008-2364Fix availableEPSS 12.7%5.0 Medium
- samba, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through...CVE-2008-1105Public exploitFix availableEPSS 69.1%7.5 High
- openssl, canonical ubuntu linux +1 moreOpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS...CVE-2008-1672Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5...CVE-2008-2136Fix available7.8 High
- xiph.org libvorbis, canonical ubuntu linux +1 moreXiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which...CVE-2008-2009Fix available4.3 Medium
- openssl, canonical ubuntu linux, debian linux +2 moreOpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random...CVE-2008-0166Public exploitFix availableEPSS 70.7%7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...CVE-2008-21089.8 Critical
- php, apple mac os x, mac os x server +2 more +4 moreThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...CVE-2008-0599EPSS 10.9%9.8 Critical
- mysql, canonical ubuntu linux, debian linux +2 moreMySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5...CVE-2008-2079Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreRace condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6...CVE-2008-13756.9 Medium
- python, canonical ubuntu linux, debian linux +2 morePython 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via...CVE-2008-18879.3 High
- python, canonical ubuntu linux, debian linux +2 moreInteger signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote...CVE-2008-1721Public exploitEPSS 22.6%7.5 High
- mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...CVE-2008-0063Fix available7.5 High
- mit kerberos 5, canonical ubuntu linux, debian linux +1 more +3 moreKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...CVE-2008-0062Fix availableEPSS 10.1%9.8 Critical
- info-zip unzip, apple mac os x, canonical ubuntu linux +1 more +3 moreThe NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using...CVE-2008-0888Fix available9.3 High
- sun jdk, jre, sdk +1 more +3 moreUnspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier...CVE-2008-11959.3 High
- apple mac os x, canonical ubuntu linux, debian linux +7 more +9 moreThe XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute...CVE-2007-6427Fix available9.3 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +2 moremod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...CVE-2008-0005Fix availableEPSS 14.7%4.3 Medium
- apache http server, canonical ubuntu linux +1 moreCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...CVE-2007-6420Fix available4.3 Medium
- mysql, yassl, apple mac os x +2 more +4 moreMultiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other...CVE-2008-0226Public exploitEPSS 91.6%7.5 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...CVE-2007-47724.0 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreInteger overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute...CVE-2007-6353Fix available7.5 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and...CVE-2007-62062.1 Low
- archive\ \, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user...CVE-2007-4829Fix available6.8 Medium
- libpng, canonical ubuntu linux +1 morepngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise...CVE-2007-52684.3 Medium
- debian linux, kernel util-linux, loop-aes-utils project loop-aes-utils +2 more +4 moremount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the...CVE-2007-5191Fix available7.2 High
- imagemagick, canonical ubuntu linux +1 moreSign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context...CVE-2007-4988Fix available7.8 High
- vmware ace, player, server +2 more +4 moreUnquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and...CVE-2007-50236.9 Medium
- vmware ace, player, server +2 more +4 moreUnspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1...CVE-2007-44975.5 Medium
- vmware ace, player, server +2 more +4 moreUnspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1...CVE-2007-44966.5 Medium
- vmware ace, player, server +3 more +5 moreInteger underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x...CVE-2007-0063EPSS 20.4%10.0 High
- vmware ace, player, server +3 more +5 moreThe DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build...CVE-2007-006110.0 High
- apache openoffice, sun staroffice, starsuite +2 more +4 moreInteger overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7,...CVE-2007-2834Fix availableEPSS 12.0%9.3 High
- gnu tar, canonical ubuntu linux, debian linux +2 moreBuffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and...CVE-2007-4476Public exploitFix availableEPSS 14.9%7.5 High
- php, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers...CVE-2007-46577.5 High
- php, canonical ubuntu linux, debian linux +2 moreThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...CVE-2007-39985.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...CVE-2007-3847Fix availableEPSS 12.9%5.0 Medium
- apple cups, freedesktop poppler, gpdf project gpdf +3 more +5 moreInteger overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1)...CVE-2007-3387Fix available6.8 Medium
- tcpdump, apple mac os x, mac os x server +4 more +6 moreInteger overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote...CVE-2007-3798Public exploitFix availableEPSS 70.4%9.8 Critical
- gimp, canonical ubuntu linux +1 moreInteger overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15...CVE-2007-2949Fix available6.8 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...CVE-2006-5752Fix availableEPSS 27.8%4.3 Medium
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...CVE-2007-2798Fix available9.0 High
- Show moreLoading…