Skip to contentCanonical Ubuntu Linux vulnerabilities
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreHeap-buffer-overflow READ in exifCVE-2019-11047Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 morekernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with...CVE-2019-19922Fix available5.5 Medium
- sa-exim project sa-exim, canonical ubuntu linux, debian linux +2 moresa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule....CVE-2019-19920Fix available8.8 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- debian edu, debian-lan-config, skolelinux debian-edu-config +2 more +4 moreDebian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu,...CVE-2019-3467Fix available7.8 High
- djangoproject django, canonical ubuntu linux +1 moreDjango Potential account hijack via password reset formCVE-2019-19844Public exploitFix availableEPSS 53.6%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some...CVE-2019-19816Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations...CVE-2019-19813Fix available5.5 Medium
- cyrus imap, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8...CVE-2019-19783Fix available6.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous...CVE-2019-19807Fix available7.8 High
- spip, canonical ubuntu linux, debian linux +2 more_core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject...CVE-2019-19830Fix available6.5 Medium
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 moresysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.CVE-2019-19725Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreOut of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13753Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreOut of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13752Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreUninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13751Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +5 more +7 moreInsufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13750Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...CVE-2019-14889Fix available7.1 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14870Fix available5.4 Medium
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14861Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreIn the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some...CVE-2019-19448Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- linux kernel, canonical ubuntu linux +1 morefpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when...CVE-2019-19602Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...CVE-2019-17012Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...CVE-2019-17011Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...CVE-2019-17010Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe plain text serializer used a fixed-size array for the number of <ol> elements it could...CVE-2019-17005Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a...CVE-2019-19524Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreIn the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious...CVE-2019-19526Fix available4.6 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a...CVE-2019-19529Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious...CVE-2019-19534Fix available2.4 Low
- rabbitmq-c project rabbitmq-c, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...CVE-2019-18609Fix available9.8 Critical
- gnupg, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the way certificate signatures could be forged using collisions found in the...CVE-2019-14855Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 morerelay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a...CVE-2019-19462Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0,...CVE-2019-14901Fix availableEPSS 16.5%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreIn the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an...CVE-2019-19318Fix available4.4 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreThe Linux kernel through 5.3.13 on powerpc allows Information Exposure because the Spectre-RSB...CVE-2019-18660Fix available4.7 Medium
- haproxy, canonical ubuntu linux, debian linux +2 moreThe HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by...CVE-2019-19330Fix available9.8 Critical
- sqlite, canonical ubuntu linux, oracle mysql workbench +4 more +6 moresqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and...CVE-2019-19244Fix available7.5 High
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...CVE-2019-19246Fix available7.5 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +5 more +7 moreSQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...CVE-2019-19242Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell...CVE-2019-14897Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA vulnerability was found in marvell wifi chip driver in Linux kernel. There is a heap-based...CVE-2019-14896Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x...CVE-2019-14895Fix available8.0 High
- cisco clamav, canonical ubuntu linux, cisco email security appliance firmware +1 more +3 moreClam AntiVirus (ClamAV) Software Email Parsing VulnerabilityCVE-2019-15961Fix available7.5 High
- Show moreLoading…