Skip to contentCanonical Ubuntu Linux vulnerabilities
- canonical ubuntu linux, debian linux, point-to-point protocol project protocol +2 moreBuffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4...CVE-2015-3310Fix available4.3 Medium
- debian dpkg, canonical ubuntu linux +1 moreThe dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote...CVE-2015-0840Fix available4.3 Medium
- x.org libx11, x11, canonical ubuntu linux +1 more +3 moreMultiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint...CVE-2013-7439Fix available7.5 High
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers...CVE-2015-1317Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly...CVE-2015-2925Public exploitFix available6.9 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...CVE-2015-0799Fix available4.3 Medium
- canonical ubuntu linuxThe Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04...CVE-2015-1319Fix available2.1 Low
- gnu mailman, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,...CVE-2015-2775Fix available7.6 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...CVE-2015-0812Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain...CVE-2015-0811Fix available6.4 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...CVE-2015-0808Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...CVE-2015-0806Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...CVE-2015-0805Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0804Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly...CVE-2015-0803Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 relies on docshell type information instead of page principal...CVE-2015-0802Public exploitFix availableEPSS 65.0%5.0 Medium
- xen, canonical ubuntu linux, debian linux +1 more +3 moreQEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command...CVE-2015-2756Fix available4.9 Medium
- gnu glibc, canonical ubuntu linux, suse linux enterprise desktop +1 more +3 moreDB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc...CVE-2014-8121Fix available5.0 Medium
- apache batik, canonical ubuntu linux, redhat jboss enterprise brms platform +2 moreImproper Input Validation in Apache BatikCVE-2015-0250Fix availableEPSS 16.6%6.4 Medium
- python requests, canonical ubuntu linux, mageia project mageia +2 morePython Requests Session FixationCVE-2015-2296Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux +1 moreThe remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote...CVE-2015-2265Fix available7.5 High
- apache standard taglibs, canonical ubuntu linux +1 moreXXE in Apache Standard TaglibsCVE-2015-0254Fix availableEPSS 12.0%7.5 High
- google chrome, v8, canonical ubuntu linux +2 moreMultiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome...CVE-2015-2238Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to...CVE-2015-1231Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in...CVE-2015-1230Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 morenet/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a...CVE-2015-1229Fix available5.0 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used...CVE-2015-1228Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreUse-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders...CVE-2015-1220Fix available6.8 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in...CVE-2015-1219Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google...CVE-2015-1218Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener...CVE-2015-1217Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreUse-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core...CVE-2015-1216Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote...CVE-2015-1215Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters...CVE-2015-1214Fix available7.5 High
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...CVE-2015-0228Fix availableEPSS 16.9%5.0 Medium
- libarchive, canonical ubuntu linux, opensuse +2 moreAbsolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote...CVE-2015-2304Fix available6.4 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but...CVE-2015-0834Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and...CVE-2015-0832Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for...CVE-2015-0830Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...CVE-2015-0829Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote...CVE-2015-0826Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreStack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla...CVE-2015-0825Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before...CVE-2015-0824Fix available5.0 Medium
- mozilla firefox, opentype sanitiser project sanitiser, canonical ubuntu linux +1 more +3 moreMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...CVE-2015-0823Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...CVE-2015-0821Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...CVE-2015-0820Fix available2.6 Low
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...CVE-2015-0819Fix available4.3 Medium
- info-zip unzip, canonical ubuntu linux +1 moreBuffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows...CVE-2015-1315Fix available7.5 High
- gnupg, canonical ubuntu linux +1 morekbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not...CVE-2015-1607Fix available5.5 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12...CVE-2015-1572Fix available4.6 Medium
- Show moreLoading…