Skip to contentCanonical Ubuntu Linux vulnerabilities
- canonical ubuntu linux, novell suse linux enterprise desktop, suse linux enterprise server +3 more +5 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0400Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise server +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0395Fix available9.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2015-0383Fix available5.4 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2014-6601Fix available10.0 High
- php, canonical ubuntu linux, debian linux +2 moreThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...CVE-2014-3710Fix availableEPSS 14.0%5.0 Medium
- pidgin, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in...CVE-2014-3694Fix available6.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreRace condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM...CVE-2014-3611Fix available4.7 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu...CVE-2014-3689Fix available7.2 High
- gnu coreutils, canonical ubuntu linux +1 moreThe parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service...CVE-2014-9471Fix available7.5 High
- xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 Medium
- linux kernel, canonical ubuntu linux +1 moreThe do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the...CVE-2014-7975Fix available5.5 Medium
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morewpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using...CVE-2014-3686Fix available6.8 Medium
- openstack cinder, nova, trove +2 more +4 moreThe processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before...CVE-2014-7230Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- debian exuberant ctags, canonical ubuntu linux, debian linux +1 more +3 morejscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite...CVE-2014-7204Fix available5.0 Medium
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to...CVE-2014-6414Fix available4.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreOpenStack Identity Keystone Exposure of Sensitive InformationCVE-2014-3621Fix available4.0 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...CVE-2014-7145Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 morenet/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate...CVE-2014-6418Fix available7.1 High
- linux kernel, canonical ubuntu linux +1 moreBuffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows...CVE-2014-6416Fix available7.8 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize...CVE-2015-3636Public exploitFix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel...CVE-2015-3331Fix availableEPSS 10.7%9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag...CVE-2015-2830Fix available1.9 Low
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the...CVE-2015-1421Fix available10.0 High
- linux kernel, canonical ubuntu linux +1 moreOff-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the...CVE-2014-9683Fix available3.6 Low
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...CVE-2014-9529Fix available6.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat...CVE-2014-8159Fix available6.9 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise server +2 moreThe pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not...CVE-2014-7970Fix available5.5 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6054Fix available4.3 Medium
- libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6053Fix available5.0 Medium
- libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreThe HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier...CVE-2014-6052Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, oracle solaris +2 moreThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...CVE-2014-7142Fix availableEPSS 24.9%6.4 Medium
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...CVE-2015-1779Fix available8.6 High
- libvirt, canonical ubuntu linux +1 moreThe qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk...CVE-2014-3633Fix available5.8 Medium
- python requests, canonical ubuntu linux, debian linux +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in RequestsCVE-2014-1829Fix available5.0 Medium
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- net-snmp, apple mac os x, canonical ubuntu linux +2 moresnmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers...CVE-2014-3565Fix available5.0 Medium
- procmail, canonical ubuntu linux +1 moreHeap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to...CVE-2014-3618Fix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +3 more +5 moreDjango cross-site scripting (XSS) attack via user-supplied redirect URLsCVE-2015-2317Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreDjango Denial-of-service possibility with strip_tagsCVE-2015-2316Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango database denial-of-service with ModelMultipleChoiceFieldCVE-2015-0222Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango DoS in django.views.static.serveCVE-2015-0221Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Cross-site Scripting VulnerabilityCVE-2015-0220Fix available4.3 Medium
- lua, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows...CVE-2014-5461Fix availableEPSS 12.0%5.0 Medium
- qemu, canonical ubuntu linux +1 moreOff-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in...CVE-2014-5388Fix available4.6 Medium
- canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance improper validation of the image_size_cap configuration optionCVE-2014-5356Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2573Fix available4.0 Medium
- Show moreLoading…