Skip to contentCanonical vulnerabilities
Newest
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to MySQL InjectionCVE-2014-0474Fix available10.0 High
- djangoproject django, canonical ubuntu linux +1 moreDjango Reuses Cached CSRF TokenCVE-2014-0473Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreCode Injection in DjangoCVE-2014-0472Public exploitFix available5.1 Medium
- canonical ubuntu linux, update-manager +1 moreDistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134...CVE-2011-31541.9 Low
- canonical accountsservice, ubuntu linux +1 moreThe Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges...CVE-2011-4406Fix available3.6 Low
- canonical libpam-modules, ubuntu linux +1 moreUntrusted search path vulnerability in pam_motd (aka the MOTD module) in libpam-modules before 1...CVE-2011-3628Fix available6.9 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 moreThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...CVE-2015-3153Fix available5.0 Medium
- haxx curl, libcurl, apple mac os x +5 more +7 morecURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...CVE-2015-3148Fix availableEPSS 14.1%5.0 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 morecURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...CVE-2015-3143Fix availableEPSS 11.1%5.0 Medium
- canonical ubuntu linux, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-2413Fix available4.3 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-2403Fix available5.0 Medium
- canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-2397Fix available9.3 High
- canonical ubuntu linux, debian linux, ibm forms viewer +4 more +6 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-0456Fix available10.0 High
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- qemu, canonical ubuntu linux +1 morehw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial...CVE-2013-4544Fix available4.9 Medium
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron Improper Authentication vulnerabilityCVE-2014-0056Fix available2.1 Low
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c...CVE-2014-2568Fix available2.9 Low
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 Critical
- apache http server, canonical ubuntu linux, oracle secure global desktop +2 moreThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2014-0098Fix availableEPSS 26.7%5.0 Medium
- apache http server, canonical ubuntu linux +1 moreThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...CVE-2013-6438Fix availableEPSS 27.5%5.0 Medium
- freetype, canonical ubuntu linux +1 moreThe (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in...CVE-2014-2241Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux +1 moreMultiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47...CVE-2013-6473Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +1 more +3 moreThe OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and...CVE-2013-6476Fix available4.4 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp...CVE-2013-6475Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows...CVE-2013-6474Fix available6.8 Medium
- freedesktop udisks, canonical ubuntu linux +1 moreStack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to...CVE-2014-0004Fix available6.9 Medium
- file project file, canonical ubuntu linux, debian linux +2 more +4 moresoftmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial...CVE-2014-2270Fix available4.3 Medium
- robert ancell lightdm, canonical ubuntu linux +1 moredmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary...CVE-2011-3153Fix available1.9 Low
- file project file, canonical ubuntu linux, freebsd +1 more +3 moresoftmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers...CVE-2014-8117Fix available5.0 Medium
- canonical ubuntu linux, debian advanced package tool +1 moremethods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails...CVE-2011-3634Fix available2.6 Low
- linux kernel, canonical ubuntu linux +1 moreThe nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a...CVE-2014-2038Fix available2.1 Low
- imagemagick, canonical ubuntu linux, opensuse +2 moreStack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick,...CVE-2014-2030Public exploitFix availableEPSS 11.1%8.8 High
- imagemagick, canonical ubuntu linux, opensuse +2 moreBuffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5...CVE-2014-1958Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreQemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in...CVE-2013-4532Fix available7.8 High
- php, canonical ubuntu linux +1 moreThe gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values,...CVE-2013-73276.8 Medium
- fine free file project free file, canonical ubuntu linux, debian linux +1 more +3 moreFine Free file before 5.17 allows context-dependent attackers to cause a denial of service ...CVE-2014-1943Fix available5.0 Medium
- linux kernel, canonical ubuntu linux +1 moreThe help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote...CVE-2014-1690Fix available2.6 Low
- mozilla firefox, network security services, seamonkey +10 more +12 moreMozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,...CVE-2014-1491Fix available4.3 Medium
- mozilla firefox, network security services, seamonkey +10 more +12 moreRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...CVE-2014-1490Fix available9.3 High
- Show moreLoading…