Skip to contentCanonical vulnerabilities
Newest
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4836Fix available2.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4826Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4819Fix available7.2 High
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated...CVE-2015-4816Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4815Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4802Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4792Fix available1.7 Low
- miniupnp project miniupnpc, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka...CVE-2015-6031Fix available6.8 Medium
- click project click, canonical ubuntu linux +1 moreclick/install.py in click does not require files in package filesystem tarballs to start with ./ ...CVE-2015-8768Fix available9.8 Critical
- optipng project optipng, canonical ubuntu linux +1 moregifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial...CVE-2015-7802Fix available5.5 Medium
- optipng project optipng, canonical ubuntu linux +1 moreUse-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code...CVE-2015-7801Fix available8.8 High
- unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty...CVE-2015-7697Fix available4.3 Medium
- unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over...CVE-2015-7696Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote...CVE-2015-5214Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote...CVE-2015-5213Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the...CVE-2015-5212Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode...CVE-2015-4551Fix availableEPSS 13.8%4.3 Medium
- audiofile, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File...CVE-2015-7747Fix available8.8 High
- postgresql, canonical ubuntu linux, debian linux +2 moreMultiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10...CVE-2015-5289Fix available6.4 Medium
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to...CVE-2015-5261Fix available7.1 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse +2 moreInteger overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2...CVE-2015-7674Fix available6.8 Medium
- apache httpclient, canonical ubuntu linux, fedoraproject fedora +2 moreDenial of service vulnerability in org.apache.httpcomponents:httpclientCVE-2015-5262Fix availableEPSS 18.8%4.3 Medium
- linuxcontainers lxc, canonical ubuntu linux +1 morelxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...CVE-2015-1335Fix available7.2 High
- apport project apport, canonical ubuntu linux +1 morekernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk...CVE-2015-1338Public exploitFix available7.2 High
- simpestreams project simplestreams, canonical ubuntu linux +1 moreSimple Streams (simplestreams) does not properly verify the GPG signatures of disk image files,...CVE-2015-1337Fix available6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreMultiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap...CVE-2015-7312Fix available4.4 Medium
- rpcbind project rpcbind, canonical ubuntu linux, debian linux +1 more +3 moreUse-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier...CVE-2015-7236Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +1 more +3 moreThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...CVE-2015-5278Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows...CVE-2015-6937Fix available4.9 Medium
- qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +1 more +3 moreThe parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to...CVE-2014-9745Fix available5.0 Medium
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 Low
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of...CVE-2015-5260Fix available7.8 High
- oxide project oxide, canonical ubuntu linux +1 moreThe oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04...CVE-2015-1332Fix available8.8 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not...CVE-2015-6826Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize...CVE-2015-6824Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a...CVE-2015-6820Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce...CVE-2015-6818Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...CVE-2015-5239Fix available6.5 Medium
- gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 moreGNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic...CVE-2015-0272Fix available5.0 Medium
- gnu gnutls, canonical ubuntu linux +1 moreDouble free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers...CVE-2015-3308Fix available7.5 High
- mediawiki, canonical ubuntu linux +1 moreThe Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25...CVE-2015-6727Fix available5.0 Medium
- libvdpau project libvdpau, canonical ubuntu linux +1 moreThe trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application,...CVE-2015-5200Fix available6.3 Medium
- libvdpau project libvdpau, canonical ubuntu linux +1 moreDirectory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain...CVE-2015-5199Fix available7.2 High
- libvdpau project libvdpau, canonical ubuntu linux +1 morelibvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain...CVE-2015-5198Fix available7.2 High
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDenial-of-service possibility in logout() view by filling session storeCVE-2015-5964Fix available5.0 Medium
- Show moreLoading…