Skip to contentCanonical Ubuntu Linux vulnerabilities
- x libxfont, canonical ubuntu linux, debian linux +2 moreThe bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x...CVE-2015-1803Fix available8.5 High
- strongswan, strongswan vpn client, canonical ubuntu linux +1 more +3 morestrongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP...CVE-2015-4171Fix available2.6 Low
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to Cache PoisoningCVE-2014-1418Fix available6.4 Medium
- canonical software-properties, ubuntu linux +1 moreppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when...CVE-2011-4407Fix available4.3 Medium
- x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3)...CVE-2014-0211Fix available7.5 High
- x libxfont, canonical ubuntu linux +1 moreMultiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow...CVE-2014-0210Fix available7.5 High
- x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org...CVE-2014-0209Fix available4.6 Medium
- qt, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service ...CVE-2014-0190Fix available4.3 Medium
- ayatana project unity, canonical ubuntu linux +1 moreUnity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which...CVE-2014-3204Fix available4.4 Medium
- ayatana project unity, canonical ubuntu linux +1 moreUnity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when...CVE-2014-32034.4 Medium
- canonical ubuntu linuxThe Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10...CVE-2013-7374Fix available4.6 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows...CVE-2014-1526Fix available6.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before...CVE-2014-1525Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreThe mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in...CVE-2014-1522Fix available9.3 High
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and...CVE-2014-1519Fix available9.3 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- debian dpkg, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x...CVE-2014-0471Fix available5.0 Medium
- openstack neutron, canonical ubuntu linux, opensuse +2 moreThe openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014...CVE-2014-0187Fix available9.0 High
- canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0...CVE-2011-31526.4 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to MySQL InjectionCVE-2014-0474Fix available10.0 High
- djangoproject django, canonical ubuntu linux +1 moreDjango Reuses Cached CSRF TokenCVE-2014-0473Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreCode Injection in DjangoCVE-2014-0472Public exploitFix available5.1 Medium
- canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134...CVE-2011-31541.9 Low
- canonical accountsservice, ubuntu linux +1 moreThe Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges...CVE-2011-4406Fix available3.6 Low
- canonical libpam-modules, ubuntu linux +1 moreUntrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1...CVE-2011-3628Fix available6.9 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 moreThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...CVE-2015-3153Fix available5.0 Medium
- haxx curl, libcurl, apple mac os x +5 more +7 morecURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...CVE-2015-3148Fix availableEPSS 14.1%5.0 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 morecURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...CVE-2015-3143Fix availableEPSS 11.1%5.0 Medium
- canonical ubuntu linux, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-2413Fix available4.3 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-2403Fix available5.0 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-2397Fix available9.3 High
- canonical ubuntu linux, debian linux, ibm forms viewer +4 more +6 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-0456Fix available10.0 High
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- qemu, canonical ubuntu linux +1 morehw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial...CVE-2013-4544Fix available4.9 Medium
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron Improper Authentication vulnerabilityCVE-2014-0056Fix available2.1 Low
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c...CVE-2014-2568Fix available2.9 Low
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- Show moreLoading…