Skip to contentCanonical vulnerabilities
Newest
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...CVE-2016-0702Public exploitFix available5.1 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Verification of Source of a Communication Channel in Apache TomcatCVE-2016-0763Fix availableEPSS 11.3%6.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Access Control in Apache TomcatCVE-2016-0714Public exploitFix availableEPSS 13.1%8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2016-0706Fix available4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a tokenCVE-2015-5351Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2015-5346Fix availableEPSS 10.6%8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345Fix availableEPSS 18.4%5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5174Fix availableEPSS 12.6%4.3 Medium
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman...CVE-2016-0739Fix available5.9 Medium
- linux kernel, canonical ubuntu core, ubuntu linux +1 more +3 moreThe overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the...CVE-2016-1576Public exploitFix available7.8 High
- linux kernel, canonical ubuntu core, ubuntu linux +1 more +3 moreThe overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX...CVE-2016-1575Public exploitFix available7.8 High
- openssl, canonical ubuntu linux, debian linux +2 more +4 moreDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...CVE-2016-0705Fix availableEPSS 26.3%9.8 Critical
- beanshell, canonical ubuntu linux, debian linux +2 moreImproper Input Validation in BeanShellCVE-2016-2510Fix availableEPSS 70.4%8.1 High
- qemu, canonical ubuntu linux +1 moreThe is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1...CVE-2016-2392Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows...CVE-2016-2391Fix available5.0 Medium
- libreoffice, canonical ubuntu linux +1 moreLibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption)...CVE-2016-0795Fix available7.8 High
- libreoffice, canonical ubuntu linux +1 moreThe lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service ...CVE-2016-0794Fix available7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreThe adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not...CVE-2016-2383Fix available5.5 Medium
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows...CVE-2016-2330Fix available8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreInteger overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5...CVE-2016-2326Fix available8.8 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...CVE-2016-2073Fix available6.5 Medium
- postgresql, canonical ubuntu linux, debian linux +2 morePostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x...CVE-2016-0773Fix available7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 morePostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x...CVE-2016-0766Fix available8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreStack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)...CVE-2015-8779Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreInteger overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent...CVE-2015-8778Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreThe strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context...CVE-2015-8776Fix available9.1 Critical
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMultiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow...CVE-2014-9761Fix available9.8 Critical
- haxx curl, canonical ubuntu linux, debian linux +2 moreThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...CVE-2016-0755Fix available7.3 High
- linux kernel, canonical ubuntu linux +1 moreRace condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain...CVE-2016-2069Fix available7.4 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which...CVE-2016-1947Fix available4.7 Medium
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME...CVE-2016-0747Fix available5.3 Medium
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9...CVE-2016-0746Fix available9.8 Critical
- f5 nginx, apple xcode, canonical ubuntu linux +3 more +5 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a...CVE-2016-0742Fix availableEPSS 82.4%7.5 High
- mariadb, oracle mysql, canonical ubuntu linux +3 more +5 moreThe ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x...CVE-2016-2047Fix available5.9 Medium
- canonical ubuntu linuxThe crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS,...CVE-2016-0727Public exploitFix available7.8 High
- ecryptfs ecryptfs-utils, canonical ubuntu linux, debian linux +3 more +5 moremount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types,...CVE-2016-1572Fix available8.4 High
- mariadb, oracle mysql, canonical ubuntu linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x...CVE-2016-0616Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote...CVE-2016-0611Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +4 more +6 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1...CVE-2016-0610Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0609Fix available1.7 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0608Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote...CVE-2016-0607Fix available2.8 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0606Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0600Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0598Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0597Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB...CVE-2016-0596Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to...CVE-2016-0595Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0546Fix available7.2 High
- Show moreLoading…