Skip to contentCanonical Ubuntu Linux vulnerabilities
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- pureftpd pure-ftpd, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been...CVE-2020-9274Fix available7.5 High
- opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moreOpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in...CVE-2020-8794Public exploitFix availableEPSS 88.9%9.8 Critical
- opensmtpd, canonical ubuntu linux, fedoraproject fedora +2 moreOpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux...CVE-2020-8793Public exploitFix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c...CVE-2020-9383Fix available7.1 High
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in RakeCVE-2020-8130Fix available6.4 Medium
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...CVE-2020-9327Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 morefs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke...CVE-2011-4915Fix available5.5 Medium
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 morearchive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with...CVE-2020-9308Fix available8.8 High
- linux kernel, canonical ubuntu linux +1 moreThe Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of...CVE-2011-24985.5 Medium
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6061Fix available7.0 High
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6062Fix available5.9 Medium
- linux kernel, linux kernel overlayfs, canonical ubuntu linux +2 moreOverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is...CVE-2012-0055Public exploit7.8 High
- o-dyn collabtive, canonical ubuntu linux, debian linux +2 moreMultiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser...CVE-2015-0258Fix available8.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...CVE-2020-6794Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...CVE-2020-6792Fix available4.3 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...CVE-2020-8992Fix available5.5 Medium
- htmlunit, apache camel, canonical ubuntu linux +1 more +3 moreCode execution vulnerability in HtmlUnitCVE-2020-5529Fix available8.1 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...CVE-2020-6801Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 72 and...CVE-2020-6800Fix available8.8 High
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...CVE-2018-14553Fix available7.5 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8648Fix available7.1 High
- cisco clamav, canonical ubuntu linux +1 moreA vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software...CVE-2020-3123Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...CVE-2020-8517Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- python, canonical ubuntu linux, netapp active iq unified manager +3 more +5 moreLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...CVE-2019-9674Fix available7.5 High
- canonical ubuntu linux, debian linux, point-to-point protocol project protocol +1 more +3 moreeap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and...CVE-2020-8597Public exploitFix availableEPSS 19.9%9.8 Critical
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- canonical ubuntu linux, debian linux, intel 7265 firmware +12 more +14 moreOut of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an...CVE-2020-0569Fix available5.7 Medium
- [unknown] ceph, canonical ubuntu linux, opensuse leap +1 more +3 moreA flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An...CVE-2020-1700Fix available6.5 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- netty, canonical ubuntu linux, debian linux +3 more +5 moreHTTP Request Smuggling in NettyCVE-2019-20444Fix available9.1 Critical
- netty, apache spark, canonical ubuntu linux +4 more +6 moreHTTP Request Smuggling in NettyCVE-2019-20445Fix availableEPSS 13.8%9.1 Critical
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...CVE-2020-7247In KEVPublic exploitFix availableEPSS 99.0%9.8 Critical
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...CVE-2020-0549Fix available5.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an...CVE-2019-20421Fix available7.5 High
- apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 moreInsecure Deserialization in Apache XML-RPCCVE-2019-17570Public exploitFix availableEPSS 49.3%9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...CVE-2020-7040Fix available8.1 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...CVE-2019-20386Fix available2.4 Low
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...CVE-2019-19344Fix available6.5 Medium
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +1 more +3 moreThere is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4...CVE-2019-14902Fix available5.4 Medium
- saltstack salt, canonical ubuntu linux, debian linux +1 more +3 moreSaltStack Salt is vulnerable to command injectionCVE-2019-17361Fix availableEPSS 15.1%9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-2694Fix available3.1 Low
- Show moreLoading…