Skip to contentCanonical Ubuntu Linux vulnerabilities
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...CVE-2015-4478Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...CVE-2015-4477Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...CVE-2015-4475Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow...CVE-2015-4474Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...CVE-2015-4473Fix available10.0 High
- gnu glibc, canonical ubuntu linux +1 moreres_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service ...CVE-2015-5180Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- canonical ubuntu linuxUse-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and...CVE-2015-1329Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreInteger overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x...CVE-2015-5707Fix available4.6 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...CVE-2015-3185Fix availableEPSS 16.3%4.3 Medium
- htacg tidy, apple iphone os, mac os x +3 more +5 moreThe ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a...CVE-2015-5523Fix available4.3 Medium
- htacg tidy, apple iphone os, mac os x +3 more +5 moreHeap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows...CVE-2015-5522Fix available6.8 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4772Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4771Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4769Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4767Fix available1.7 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4761Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows...CVE-2015-4757Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +1 more +3 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier,...CVE-2015-4737Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect...CVE-2015-2661Fix available2.1 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2641Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2639Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows...CVE-2015-2620Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2617Fix available6.5 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2611Fix available4.0 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2582Fix available4.0 Medium
- sqlite, canonical ubuntu linux +1 moreBuffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a...CVE-2013-7443Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Vulnerable to HTTP Response Splitting AttackCVE-2015-5144Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session storeCVE-2015-5143Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x...CVE-2015-5706Fix available4.6 Medium
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 High
- mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...CVE-2015-2721Fix available4.3 Medium
- xmlsoft libxml2, canonical ubuntu linux +1 morelibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...CVE-2015-7941Fix available4.3 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreInteger overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...CVE-2015-3279Fix available7.5 High
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- Show moreLoading…