Skip to contentCanonical Ubuntu Linux vulnerabilities
- qemu, canonical ubuntu linux, debian linux +2 moreThe (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest...CVE-2016-5338Fix available7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS...CVE-2016-5337Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause...CVE-2016-5238Fix available4.4 Medium
- clamav, canonical ubuntu linux +1 moreClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service ...CVE-2016-1372Fix available5.5 Medium
- clamav, canonical ubuntu linux +1 moreClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service ...CVE-2016-1371Fix available5.5 Medium
- libimobiledevice, libimobiledevice libusbmuxd, canonical ubuntu linux +2 more +4 moreThe socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote...CVE-2016-5104Fix available5.3 Medium
- haproxy, canonical ubuntu linux +1 moreHAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to...CVE-2016-5360Fix availableEPSS 42.8%7.5 High
- gnu wget, canonical ubuntu linux, oracle solaris +1 more +3 moreGNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request...CVE-2016-4971Public exploitFix availableEPSS 46.1%8.8 High
- gnu glibc, canonical ubuntu linux, opensuse leap +1 more +3 moreStack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C...CVE-2016-4429Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3...CVE-2016-1583Public exploitFix available7.8 High
- mozilla firefox, network security services, canonical ubuntu linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...CVE-2016-2834Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...CVE-2016-2833Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...CVE-2016-2832Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...CVE-2016-2831Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...CVE-2016-2829Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...CVE-2016-2828Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...CVE-2016-2825Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...CVE-2016-2822Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...CVE-2016-2821Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...CVE-2016-2819Public exploitFix availableEPSS 24.0%8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +18 more +20 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...CVE-2016-2818Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, novell suse linux enterprise desktop +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...CVE-2016-2815Fix available8.8 High
- canonical ubuntu linux, debian linux, google android +1 more +3 moreThe XML parser in Expat does not use sufficient entropy for hash initialization, which allows...CVE-2016-5300Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to...CVE-2016-1703Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome...CVE-2016-1702Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreWebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in...CVE-2016-1699Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as...CVE-2016-1697Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...CVE-2016-5126Fix available7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS...CVE-2016-4454Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS...CVE-2016-4453Fix available4.4 Medium
- canonical lxd, ubuntu linux +1 morelxd vulnerabilitiesCVE-2016-1582Fix available5.5 Medium
- canonical lxd, ubuntu linux +1 morelxd vulnerabilitiesCVE-2016-1581Fix available5.5 Medium
- f5 nginx, canonical ubuntu linux, debian linux +2 moreos/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to...CVE-2016-4450Fix availableEPSS 16.4%7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to...CVE-2016-1695Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreWebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704...CVE-2016-1692Fix available5.3 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreSkia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows...CVE-2016-1691Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome...CVE-2016-1689Fix available6.5 Medium
- google chrome, v8, canonical ubuntu linux +7 more +9 moreThe regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in...CVE-2016-1688Fix available6.5 Medium
- google chrome, xmlsoft libxslt, canonical ubuntu linux +7 more +9 morenumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles...CVE-2016-1683Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules...CVE-2016-1682Fix available6.1 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreUse-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome...CVE-2016-1680Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google...CVE-2016-1679Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreobjects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not...CVE-2016-1678Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreuri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an...CVE-2016-1677Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1675Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1673Fix available8.8 High
- graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 moreThe OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...CVE-2016-5118Fix availableEPSS 50.0%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter...CVE-2016-5107Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID...CVE-2016-5106Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS...CVE-2016-5105Fix available4.4 Medium
- Show moreLoading…