Skip to contentCanonical vulnerabilities
Newest
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDjango denial of service via empty session record creationCVE-2015-5963Fix available5.0 Medium
- apple safari, iphone os, canonical ubuntu linux +2 moreThe Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1...CVE-2015-3752Fix available5.0 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3749Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3748Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3747Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3745Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3743Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3741Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3731Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...CVE-2015-4478Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...CVE-2015-4477Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...CVE-2015-4475Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow...CVE-2015-4474Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...CVE-2015-4473Fix available10.0 High
- gnu glibc, canonical ubuntu linux +1 moreres_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service ...CVE-2015-5180Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- canonical ubuntu linuxUse-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and...CVE-2015-1329Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreInteger overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x...CVE-2015-5707Fix available4.6 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...CVE-2015-3185Fix availableEPSS 16.3%4.3 Medium
- htacg tidy, apple iphone os, mac os x +3 more +5 moreThe ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a...CVE-2015-5523Fix available4.3 Medium
- htacg tidy, apple iphone os, mac os x +3 more +5 moreHeap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows...CVE-2015-5522Fix available6.8 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4772Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4771Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4769Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4767Fix available1.7 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-4761Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows...CVE-2015-4757Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +1 more +3 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier,...CVE-2015-4737Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect...CVE-2015-2661Fix available2.1 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2641Fix available3.5 Low
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2639Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows...CVE-2015-2620Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated...CVE-2015-2617Fix available6.5 Medium
- Show moreLoading…