Skip to contentCanonical Ubuntu Linux vulnerabilities
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...CVE-2012-3406Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...CVE-2012-3405Fix available5.0 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and...CVE-2012-3404Fix available5.0 Medium
- canonical ubuntu linuxRace condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5...CVE-2013-21621.9 Low
- php, canonical ubuntu linux, redhat enterprise linux +2 moreThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...CVE-2013-4248Fix available4.3 Medium
- python, canonical ubuntu linux, opensuse +2 moreThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...CVE-2013-4238Fix available4.3 Medium
- samba, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3...CVE-2013-4124Public exploitFix availableEPSS 69.0%5.0 Medium
- canonical ubuntu linuxA certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu...CVE-2013-10606.9 Medium
- gnupg, gnupg libgcrypt, canonical ubuntu linux +2 more +4 moreGnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other...CVE-2013-4242Fix available1.9 Low
- apache xerces2 java, ibm java, oracle jre +12 more +14 moreMissing XML Validation in Apache Xerces2CVE-2013-4002Public exploitFix availableEPSS 24.7%7.1 High
- file roller project roller, canonical ubuntu linux +1 moreDirectory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9...CVE-2013-4668Fix available5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5...CVE-2013-38123.5 Low
- oracle mysql, canonical ubuntu linux, mariadb +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5...CVE-2013-38094.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5...CVE-2013-38044.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5...CVE-2013-38024.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5...CVE-2013-37934.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows...CVE-2013-37834.0 Medium
- spice project spice, canonical ubuntu linux +1 moreThe (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server...CVE-2013-4130Fix available5.0 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...CVE-2013-1896Fix availableEPSS 29.5%4.3 Medium
- linux kernel, canonical ubuntu linux +1 morenet/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial...CVE-2013-1059Fix available7.8 High
- canonical ubuntu linux, opensuse, perlmonks module\ +2 moreThe cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows...CVE-2013-2145Fix available4.4 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 more +4 morePuppet Improper Input Validation vulnerabilityCVE-2013-3567Fix available7.5 High
- mozilla firefox, thunderbird, thunderbird esr +13 more +15 moreMozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and...CVE-2013-1690In KEVPublic exploitEPSS 69.0%8.8 High
- haxx curl, libcurl, canonical ubuntu linux +2 more +4 moreHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...CVE-2013-2174Fix available6.8 Medium
- haproxy, canonical ubuntu linux, debian linux +1 more +3 moreHAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*...CVE-2013-2175Fix available5.0 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...CVE-2013-1862Fix availableEPSS 24.9%5.1 Medium
- mongodb, canonical ubuntu linux, opensuse +2 moreUse of NullPointerException Catch to Detect NULL Pointer Dereference in PymongoCVE-2013-2132Fix available4.3 Medium
- apache subversion, canonical ubuntu linux, opensuse +2 moreThe svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers...CVE-2013-2112Fix available7.8 High
- apache subversion, canonical ubuntu linux, opensuse +2 moreSubversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a...CVE-2013-1968Fix available5.5 Medium
- mesa3d mesa, canonical ubuntu linux, opensuse +1 more +3 moreThe Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of...CVE-2013-1872Fix available6.8 Medium
- libraw, canonical ubuntu linux, opensuse +2 moreMultiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw...CVE-2013-2126Fix available7.5 High
- x libx11, canonical ubuntu linux +1 moreMultiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to...CVE-2013-1981Fix available6.8 Medium
- x libxcb, canonical ubuntu linux, debian linux +3 more +5 moreInteger overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of...CVE-2013-2064Fix available6.8 Medium
- x libxrender, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger...CVE-2013-1987Fix available6.8 Medium
- canonical telepathy-idle, ubuntu linux +1 moretelepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the...CVE-2007-6746Fix available5.8 Medium
- mozilla firefox, thunderbird, thunderbird esr +15 more +17 moreMozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and...CVE-2013-1675In KEV6.5 Medium
- python, canonical ubuntu linux +1 moreAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...CVE-2013-2099Fix available4.3 Medium
- clamav, canonical ubuntu linux, suse linux enterprise server +2 morepdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out...CVE-2013-2021Fix available4.3 Medium
- clamav, canonical ubuntu linux, suse linux enterprise server +2 moreInteger underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote...CVE-2013-2020Fix available5.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +7 more +9 moreschpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...CVE-2002-2443Fix available5.0 Medium
- gpsd project gpsd, canonical ubuntu linux +1 moreThe NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service ...CVE-2013-2038Fix available4.3 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 moreThe IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute...CVE-2013-1927Fix available6.8 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 moreThe IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets...CVE-2013-1926Fix available5.8 Medium
- oracle java runtime environment (jre), jre, canonical ubuntu linux +1 more +3 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2013-2423In KEVPublic exploitEPSS 85.2%4.3 Medium
- canonical ubuntu linux, x x.org-xserver +1 moreX.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input...CVE-2013-1940Fix available2.1 Low
- haxx curl, libcurl, canonical ubuntu linux +2 moreThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...CVE-2013-1944Fix available5.0 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION...CVE-2013-19014.0 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17,...CVE-2013-1900Fix available8.5 High
- postgresql, canonical ubuntu linux +1 moreArgument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x...CVE-2013-1899EPSS 54.3%6.5 Medium
- mozilla firefox, seamonkey, thunderbird +7 more +9 moreInteger signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as...CVE-2013-08006.8 Medium
- Show moreLoading…