Skip to contentCanonical vulnerabilities
Newest
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2611Fix available4.0 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2582Fix available4.0 Medium
- sqlite, canonical ubuntu linux +1 moreBuffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a...CVE-2013-7443Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Vulnerable to HTTP Response Splitting AttackCVE-2015-5144Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session storeCVE-2015-5143Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x...CVE-2015-5706Fix available4.6 Medium
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 High
- mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...CVE-2015-2721Fix available4.3 Medium
- xmlsoft libxml2, canonical ubuntu linux +1 morelibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...CVE-2015-7941Fix available4.3 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreInteger overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...CVE-2015-3279Fix available7.5 High
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not...CVE-2015-5364Fix available7.8 High
- debian unattended-upgrades, canonical ubuntu linux +1 moreunattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force...CVE-2015-1330Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups...CVE-2015-3258Fix available7.5 High
- openstack icehouse, juno, kilo +1 more +3 moreOpenStack Cinder file disclosure in image convertCVE-2015-1851Fix available6.8 Medium
- canonical ubuntu linuxThe simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04,...CVE-2015-1323Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in...CVE-2015-1328Public exploitFix availableEPSS 37.7%7.8 High
- ffmpeg, libav, canonical ubuntu linux +2 moreThe msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg...CVE-2015-3395Fix available6.8 Medium
- linux kernel, canonical ubuntu linux +1 moreThe OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during...CVE-2015-4004Fix available8.5 High
- linux kernel, canonical ubuntu linux, opensuse +2 moredrivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does...CVE-2015-4002Fix available9.0 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate...CVE-2015-4167Fix available4.7 Medium
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...CVE-2015-4106Fix available4.6 Medium
- t1utils project t1utils, canonical ubuntu linux +1 moreBuffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote...CVE-2015-3905Fix available7.5 High
- ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 moreracoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...CVE-2015-4047Fix available7.8 High
- postgresql, canonical ubuntu linux, debian linux +2 morecontrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x...CVE-2015-3167Fix available7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreThe snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11...CVE-2015-3166Fix available9.8 Critical
- postgresql, apple mac os x server, canonical ubuntu linux +1 more +3 moreDouble free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11,...CVE-2015-3165Fix available4.3 Medium
- canonical ubuntu linuxRace condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14...CVE-2015-1325Public exploitFix available7.0 High
- canonical ubuntu linuxApport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged...CVE-2015-1324Fix available7.8 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not...CVE-2015-1872Fix available6.8 Medium
- wouter verhelst nbd, canonical ubuntu linux +1 morenbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals,...CVE-2015-0847Fix available7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +3 more +5 moreBuffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library ...CVE-2015-1781Fix available6.8 Medium
- libssh, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh...CVE-2015-3146Fix available7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +2 more +4 moreThe _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option...CVE-2015-3451Fix available5.0 Medium
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to...CVE-2015-1250Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreUse-after-free vulnerability in the MutationObserver::disconnect function in core/dom...CVE-2015-1243Fix available7.5 High
- ubuntu network-manager, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before...CVE-2015-1322Fix available4.6 Medium
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows...CVE-2015-1321Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 moreThe HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4...CVE-2015-1774Fix available6.8 Medium
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement...CVE-2015-3415Fix available7.5 High
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle...CVE-2015-3416Fix available7.5 High
- Show moreLoading…