Skip to contentCanonical Ubuntu Linux vulnerabilities
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...CVE-2018-5183Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...CVE-2018-5178Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...CVE-2018-5168Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...CVE-2018-5159Public exploitFix availableEPSS 20.6%9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF ViewerCVE-2018-5158Public exploitFix availableEPSS 10.3%8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...CVE-2018-5157Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...CVE-2018-1130Fix available5.5 Medium
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...CVE-2018-1118Fix available2.3 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- freedesktop xdg-utils, canonical ubuntu linux, debian linux +2 moreThe open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before...CVE-2017-18266Fix available8.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreThe TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote...CVE-2018-10963Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory...CVE-2018-10958Fix available6.5 Medium
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...CVE-2018-1087Fix available8.0 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2018-10805Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.CVE-2018-10804Fix available6.5 Medium
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before...CVE-2018-4200Public exploitFix availableEPSS 10.0%8.8 High
- libtiff, canonical ubuntu linux +1 moreTIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as...CVE-2018-10779Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...CVE-2018-0494Public exploitFix availableEPSS 16.5%6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel version 3.18 contains a dangerous feature vulnerability in...CVE-2018-1000199Public exploitFix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10549Fix available8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10548Fix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1...CVE-2018-10547Fix available6.1 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10546Public exploitFix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x...CVE-2018-10545Fix available4.7 Medium
- libraw, canonical ubuntu linux +1 moreAn issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F...CVE-2018-10529Fix available8.8 High
- libraw, canonical ubuntu linux +1 moreAn issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char...CVE-2018-10528Fix available8.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4...CVE-2018-10323Fix available5.5 Medium
- packagekit, canonical ubuntu linux, debian linux +6 more +8 moreAn authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users...CVE-2018-1106Fix available5.5 Medium
- check point software technologies ltd. linux kernel, debian linux, linux kernel +4 more +6 moreThe udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up...CVE-2018-8781Fix available7.8 High
- openslp, canonical ubuntu linux, debian linux +35 more +37 moreOpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue...CVE-2017-17833Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance...CVE-2018-2846Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2018-2839Fix available4.9 Medium
- oracle corporation java, canonical ubuntu linux, netapp cloud backup +15 more +17 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported...CVE-2018-2826Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, netapp cloud backup +15 more +17 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported...CVE-2018-2825Fix available8.3 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-2819Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...CVE-2018-2818Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2817Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2816Fix available4.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2815Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-2814Fix available8.3 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +14 more +16 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2813Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2812Fix available5.5 Medium
- Show moreLoading…