Skip to contentCanonical Ubuntu Linux vulnerabilities
- apple cups, canonical ubuntu linux +1 morelppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...CVE-2013-6891Fix available1.2 Low
- httplib2 project httplib2, canonical ubuntu linux +1 morehttplib2 incorrectly checks SSL certificateCVE-2013-2037Fix available2.6 Low
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5...CVE-2014-04373.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5...CVE-2014-04202.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5...CVE-2014-04124.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5...CVE-2014-04024.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5...CVE-2014-04014.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5...CVE-2014-03933.3 Low
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5...CVE-2014-03864.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5...CVE-2013-59082.6 Low
- oracle mysql, canonical ubuntu linux, debian linux +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5...CVE-2013-58914.0 Medium
- canonical ubuntu linux, samsung x14j firmware +1 moreInteger overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9...CVE-2013-7447Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel...CVE-2013-7421Fix available2.1 Low
- puppet enterprise, puppetlabs puppet, canonical ubuntu linux +1 more +3 morePuppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3...CVE-2013-4969Fix available2.1 Low
- canonical ubuntu linux, debian linux, opensuse +1 more +3 moreInteger underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context...CVE-2013-6424Fix available5.0 Medium
- haxx libcurl, canonical ubuntu linux, debian linux +2 moreThe GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature...CVE-2013-6422Fix available4.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreThe ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before...CVE-2013-6391Fix available5.8 Medium
- samba, canonical ubuntu linux, novell suse linux enterprise desktop +3 more +5 moreThe Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4...CVE-2015-0240Public exploitFix availableEPSS 88.2%10.0 High
- samba, canonical ubuntu linux +1 moreSamba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...CVE-2013-4496Fix available5.0 Medium
- net-snmp, apple mac os x, canonical ubuntu linux +2 moreNet-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT...CVE-2012-6151Public exploitFix available4.3 Medium
- mozilla firefox, seamonkey, thunderbird +6 more +8 moreMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey...CVE-2013-66735.9 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote...CVE-2013-66724.3 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before...CVE-2013-6671EPSS 11.1%9.8 Critical
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox...CVE-2013-56197.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user...CVE-2013-5618EPSS 10.4%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in...CVE-2013-56169.8 Critical
- mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,...CVE-2013-56159.8 Critical
- mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox...CVE-2013-56144.3 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox...CVE-2013-56139.8 Critical
- mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23...CVE-2013-56124.3 Medium
- mozilla firefox, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger,...CVE-2013-56115.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and...CVE-2013-561010.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0,...CVE-2013-56099.8 Critical
- pixman, canonical ubuntu linux, debian linux +7 more +9 moreInteger underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as...CVE-2013-6425Fix available5.0 Medium
- samba, canonical ubuntu linux +1 moreThe winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1...CVE-2012-6150Fix available3.6 Low
- wouter verhelst nbd, canonical ubuntu linux, debian linux +2 morenbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which...CVE-2013-6410Fix available7.5 High
- php, apple mac os x, canonical ubuntu linux +2 more +4 moreThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...CVE-2013-67125.0 Medium
- robert ancell lightdm, canonical ubuntu linux +1 moreLightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the...CVE-2013-44593.3 Low
- canonical maas, ubuntu linux +1 moremaas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files,...CVE-2013-10585.8 Medium
- openstack horizon, canonical ubuntu linux, opensuse +2 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and...CVE-2013-6858Fix available4.3 Medium
- canonical ubuntu linux, quassel-irc quassel irc +1 morectcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a...CVE-2010-3443Fix available5.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreFormat string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler...CVE-2013-4474Public exploitFix availableEPSS 10.5%5.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreStack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler...CVE-2013-4473Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreThe udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when...CVE-2013-4563Fix available7.1 High
- canonical ubuntu linux, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-2402Fix available7.5 High
- canonical ubuntu linux, ibm forms viewer, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-0455Fix available9.3 High
- canonical ubuntu linux, ibm forms viewer, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-0454Fix available7.5 High
- canonical maas, ubuntu linux +1 moreUntrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local...CVE-2013-10574.4 Medium
- canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...CVE-2015-2808Fix availableEPSS 73.9%5.0 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51,...CVE-2014-2427Fix available7.5 High
- Show moreLoading…