Skip to contentCanonical Ubuntu Linux vulnerabilities
- mozilla firefox, network security services, seamonkey +9 more +11 moreThe CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in...CVE-2013-0791Fix available5.0 Medium
- transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and...CVE-2012-6129Fix available7.5 High
- mariadb, oracle mysql, canonical ubuntu linux +6 more +8 moreMariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68,...CVE-2013-1861Public exploitEPSS 18.8%5.0 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly...CVE-2013-17994.3 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly...CVE-2013-0240Fix available4.3 Medium
- ibm storwize, samba, canonical ubuntu linux +2 moreThe SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1...CVE-2013-0454Fix available4.0 Medium
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c...CVE-2013-0211Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +1 more +3 morelibxml2 through 2.9.1 does not properly handle external entities expansion unless an application...CVE-2013-0339Fix available6.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, opensuse +2 morelibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...CVE-2013-0338Fix available4.3 Medium
- openstack folsom, canonical ubuntu linux +1 moreOpenStack Keystone Improper Authentication vulnerabilityCVE-2013-1865Fix available6.8 Medium
- openstack essex, folsom, grizzly +1 more +3 moreOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp functionCVE-2013-1838Fix available4.0 Medium
- openstack essex, folsom, grizzly +6 more +8 moreOpenstack nova: vnc proxy can connect to the wrong vmCVE-2013-0335Fix available7.6 High
- canonical ubuntu linuxpam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable,...CVE-2013-10527.2 High
- debian apt, canonical ubuntu linux, debian advanced package tool +2 moreapt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which...CVE-2013-1051Fix available4.3 Medium
- canonical ubuntu linux, fujitsu m10-1 firmware, m10-4 firmware +13 more +15 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases,...CVE-2013-2566EPSS 84.4%5.9 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 moreThe default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x...CVE-2013-2275Fix available4.0 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does...CVE-2013-1654Fix available5.0 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1...CVE-2013-1653Fix available7.1 High
- puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1...CVE-2013-1652Fix available4.9 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 moreThe (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18,...CVE-2013-1640Fix available9.0 High
- ruby-lang rdoc, ruby, canonical ubuntu linux +2 moreRDoc contains XSS vulnerabilityCVE-2013-0256Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango is vulnerable to Denial of Service attack in formsetCVE-2013-0306Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Data leakage via admin history logCVE-2013-0305Fix available4.0 Medium
- canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance logs user name and password in cleartextCVE-2013-0212Public exploitFix available4.0 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...CVE-2013-0247Fix available5.0 Medium
- qt, canonical ubuntu linux, opensuse +2 moreThe QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5,...CVE-2012-60934.3 Medium
- digia qt, canonical ubuntu linux +1 moreThe XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which...CVE-2012-56244.3 Medium
- ffmpeg, google chrome, canonical ubuntu linux +1 more +3 moreBuffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec...CVE-2013-0894Fix available7.5 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0,...CVE-2013-07849.3 High
- mozilla firefox, seamonkey, thunderbird +9 more +11 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0,...CVE-2013-07839.3 High
- mozilla firefox, seamonkey, thunderbird +9 more +11 moreHeap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla...CVE-2013-07829.3 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreUse-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before...CVE-2013-07819.3 High
- mozilla firefox, seamonkey, thunderbird +9 more +11 moreUse-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla...CVE-2013-07809.3 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreThe nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before...CVE-2013-07799.3 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreThe ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0...CVE-2013-07789.3 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreUse-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox...CVE-2013-07779.3 High
- mozilla firefox, seamonkey, thunderbird +9 more +11 moreMozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,...CVE-2013-07764.0 Medium
- mozilla firefox, seamonkey, thunderbird +9 more +11 moreUse-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla...CVE-2013-07759.3 High
- mozilla firefox, seamonkey, thunderbird +3 more +5 moreMozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,...CVE-2013-07744.3 Medium
- mozilla firefox, seamonkey, thunderbird +4 more +6 moreThe Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox...CVE-2013-07739.3 High
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreThe RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3,...CVE-2013-07725.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +1 more +3 moreMozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent...CVE-2013-07659.3 High
- openstack essex, folsom, canonical ubuntu linux +2 moreThe boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova...CVE-2013-0208Fix available6.5 Medium
- canonical ubuntu linux, qxl graphics driver project xf86-video-qxl, redhat enterprise linux desktop +2 more +4 moreThe QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service ...CVE-2013-0241Fix available2.1 Low
- squid-cache squid, canonical ubuntu linux +1 morecachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote...CVE-2013-0189Fix availableEPSS 21.9%5.0 Medium
- redhat libvirt, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreUse-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in...CVE-2013-0170Fix available6.8 Medium
- mozilla network security services, canonical ubuntu linux, oracle enterprise manager ops center +12 more +14 moreThe TLS implementation in Mozilla Network Security Services (NSS) does not properly consider...CVE-2013-1620Fix available4.3 Medium
- haxx curl, libcurl, canonical ubuntu linux +2 moreStack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl...CVE-2013-0249Public exploitFix availableEPSS 21.6%7.5 High
- isc bind, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving...CVE-2012-5689Fix availableEPSS 12.1%7.1 High
- inkscape, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files...CVE-2012-5656Fix available5.5 Medium
- Show moreLoading…