Skip to contentCanonical vulnerabilities
Newest
- mongodb, canonical ubuntu linux, opensuse +2 moreUse of NullPointerException Catch to Detect NULL Pointer Dereference in PymongoCVE-2013-2132Fix available4.3 Medium
- apache subversion, canonical ubuntu linux, opensuse +2 moreThe svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers...CVE-2013-2112Fix available7.8 High
- apache subversion, canonical ubuntu linux, opensuse +2 moreSubversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a...CVE-2013-1968Fix available5.5 Medium
- mesa3d mesa, canonical ubuntu linux, opensuse +1 more +3 moreThe Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of...CVE-2013-1872Fix available6.8 Medium
- libraw, canonical ubuntu linux, opensuse +2 moreMultiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw...CVE-2013-2126Fix available7.5 High
- x libx11, canonical ubuntu linux +1 moreMultiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to...CVE-2013-1981Fix available6.8 Medium
- x libxcb, canonical ubuntu linux, debian linux +3 more +5 moreInteger overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of...CVE-2013-2064Fix available6.8 Medium
- x libxrender, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger...CVE-2013-1987Fix available6.8 Medium
- canonical telepathy-idle, ubuntu linux +1 moretelepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the...CVE-2007-6746Fix available5.8 Medium
- mozilla firefox, thunderbird, thunderbird esr +15 more +17 moreMozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and...CVE-2013-1675In KEV6.5 Medium
- python, canonical ubuntu linux +1 moreAlgorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x,...CVE-2013-2099Fix available4.3 Medium
- clamav, canonical ubuntu linux, suse linux enterprise server +2 morepdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out...CVE-2013-2021Fix available4.3 Medium
- clamav, canonical ubuntu linux, suse linux enterprise server +2 moreInteger underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote...CVE-2013-2020Fix available5.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +7 more +9 moreschpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...CVE-2002-2443Fix available5.0 Medium
- gpsd project gpsd, canonical ubuntu linux +1 moreThe NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service ...CVE-2013-2038Fix available4.3 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 moreThe IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute...CVE-2013-1927Fix available6.8 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 moreThe IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets...CVE-2013-1926Fix available5.8 Medium
- oracle java runtime environment (jre), jre, canonical ubuntu linux +1 more +3 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2013-2423In KEVPublic exploitEPSS 85.2%4.3 Medium
- canonical ubuntu linux, x x.org-xserver +1 moreX.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input...CVE-2013-1940Fix available2.1 Low
- haxx curl, libcurl, canonical ubuntu linux +2 moreThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...CVE-2013-1944Fix available5.0 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION...CVE-2013-19014.0 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17,...CVE-2013-1900Fix available8.5 High
- postgresql, canonical ubuntu linux +1 moreArgument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x...CVE-2013-1899EPSS 54.3%6.5 Medium
- mozilla firefox, seamonkey, thunderbird +7 more +9 moreInteger signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as...CVE-2013-08006.8 Medium
- mozilla firefox, network security services, seamonkey +9 more +11 moreThe CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in...CVE-2013-0791Fix available5.0 Medium
- transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and...CVE-2012-6129Fix available7.5 High
- mariadb, oracle mysql, canonical ubuntu linux +6 more +8 moreMariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68,...CVE-2013-1861Public exploitEPSS 18.8%5.0 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly...CVE-2013-17994.3 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly...CVE-2013-0240Fix available4.3 Medium
- ibm storwize, samba, canonical ubuntu linux +2 moreThe SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1...CVE-2013-0454Fix available4.0 Medium
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c...CVE-2013-0211Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +1 more +3 morelibxml2 through 2.9.1 does not properly handle external entities expansion unless an application...CVE-2013-0339Fix available6.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, opensuse +2 morelibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...CVE-2013-0338Fix available4.3 Medium
- openstack folsom, canonical ubuntu linux +1 moreOpenStack Keystone Improper Authentication vulnerabilityCVE-2013-1865Fix available6.8 Medium
- openstack essex, folsom, grizzly +1 more +3 moreOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp functionCVE-2013-1838Fix available4.0 Medium
- openstack essex, folsom, grizzly +6 more +8 moreOpenstack nova: vnc proxy can connect to the wrong vmCVE-2013-0335Fix available7.6 High
- canonical ubuntu linuxpam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable,...CVE-2013-10527.2 High
- debian apt, canonical ubuntu linux, debian advanced package tool +2 moreapt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which...CVE-2013-1051Fix available4.3 Medium
- canonical ubuntu linux, fujitsu m10-1 firmware, m10-4 firmware +13 more +15 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases,...CVE-2013-2566EPSS 84.4%5.9 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 moreThe default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x...CVE-2013-2275Fix available4.0 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does...CVE-2013-1654Fix available5.0 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1...CVE-2013-1653Fix available7.1 High
- puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1...CVE-2013-1652Fix available4.9 Medium
- puppet, puppet enterprise, canonical ubuntu linux +2 moreThe (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18,...CVE-2013-1640Fix available9.0 High
- ruby-lang rdoc, ruby, canonical ubuntu linux +2 moreRDoc contains XSS vulnerabilityCVE-2013-0256Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango is vulnerable to Denial of Service attack in formsetCVE-2013-0306Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango Data leakage via admin history logCVE-2013-0305Fix available4.0 Medium
- canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance logs user name and password in cleartextCVE-2013-0212Public exploitFix available4.0 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...CVE-2013-0247Fix available5.0 Medium
- qt, canonical ubuntu linux, opensuse +2 moreThe QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5,...CVE-2012-60934.3 Medium
- Show moreLoading…