Skip to contentCanonical Ubuntu Linux vulnerabilities
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- cups, canonical ubuntu linux, debian linux +2 moreAppArmor cupsd Sandbox Bypass Due to Use of Hard LinksCVE-2018-6553Fix available8.8 High
- apple mac os x, canonical ubuntu linux, debian linux +2 moreIn macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with...CVE-2018-4181Fix available5.5 Medium
- apple mac os x, canonical ubuntu linux, debian linux +2 moreIn macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with...CVE-2018-4180Fix available7.8 High
- haxx curl, canonical ubuntu linux +1 moreCurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...CVE-2018-0500Fix available9.8 Critical
- [unknown] polkit, canonical ubuntu linux, debian linux +2 moreA flaw was found in polkit before version 0.116. The implementation of the...CVE-2018-1116Fix available4.7 Medium
- libpng, canonical ubuntu linux, oracle jdk +4 more +6 moreIn libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ...CVE-2018-13785Fix available6.5 Medium
- audiofile, canonical ubuntu linux +1 moreThe audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup...CVE-2018-13440Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux...CVE-2018-13406Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users...CVE-2018-13405Public exploitFix available7.8 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 morePlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...CVE-2018-12374Fix available4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moredDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...CVE-2018-12373Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moreDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...CVE-2018-12372Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore...CVE-2018-13153Fix available6.5 Medium
- google android, canonical ubuntu linux +1 moreIn driver_override_store and driver_override_show of bus.c, there is a possible double free due...CVE-2018-9415Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service ...CVE-2018-13099Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service ...CVE-2018-13096Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An...CVE-2018-13094Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3...CVE-2018-13053Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time...CVE-2018-12896Fix available5.5 Medium
- xapian xapian-core, canonical ubuntu linux +1 morexapian-core Cross-site Scripting vulnerabilityCVE-2018-0499Fix available6.1 Medium
- [unknown] ansible, canonical ubuntu linux, debian linux +4 more +6 moreAnsible exposes sensitive data in log files and on the terminalCVE-2018-10855Fix available5.9 Medium
- debian devscripts, canonical ubuntu linux +1 morescripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe...CVE-2018-13043Fix available9.8 Critical
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreVulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-3081Fix available5.0 Medium
- gpac, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the...CVE-2018-13006Fix available9.8 Critical
- gpac, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base...CVE-2018-13005Fix available9.8 Critical
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- [unknown] perl-archive-zip, canonical ubuntu linux, debian linux +2 moreperl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the...CVE-2018-10860Fix availableEPSS 42.2%5.4 Medium
- linux kernel, canonical ubuntu linux +1 morentfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to...CVE-2018-12931Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 morentfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows...CVE-2018-12930Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 morentfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows...CVE-2018-12929Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in...CVE-2018-12928Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...CVE-2018-5187Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...CVE-2018-5186Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreIn Reader View SameSite cookie protections are not checked on exiting. This allows for a payload...CVE-2018-12370Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +2 moreWebExtensions bundled with embedded experiments were not correctly checked for proper...CVE-2018-12369Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIn the previous mitigations for Spectre, the resolution or precision of various methods was...CVE-2018-12367Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...CVE-2018-12361Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreService workers can use redirection to avoid the tainting of cross-origin resources in some...CVE-2018-12358Fix available4.3 Medium
- libtiff, canonical ubuntu linux +1 moreHeap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3,...CVE-2018-12900Fix availableEPSS 24.8%8.8 High
- busybox, canonical ubuntu linux, debian linux +2 moreBusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e...CVE-2018-1000517Fix availableEPSS 32.5%9.8 Critical
- Show moreLoading…