Skip to contentCanonical vulnerabilities
Newest
- oracle mysql, canonical ubuntu linux, redhat enterprise linux +2 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local...CVE-2016-0665Fix available5.5 Medium
- oracle mysql, canonical ubuntu linux, redhat enterprise linux +2 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local...CVE-2016-0661Fix available4.7 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0642Fix available4.7 Medium
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in Oxide allows remote attackers to cause a denial of service ...CVE-2016-1578Fix available9.8 Critical
- videolan vlc media player, canonical ubuntu linux +1 moreBuffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player...CVE-2016-3941Fix available5.5 Medium
- xen, canonical ubuntu linux +1 moreXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV...CVE-2016-3961Fix available5.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...CVE-2016-1659Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...CVE-2016-1655Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...CVE-2016-1654Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...CVE-2016-1653Fix available8.8 High
- openbsd openssh, canonical ubuntu core, ubuntu linux +2 more +4 moreThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...CVE-2015-8325Fix available7.8 High
- redhat libvirt, canonical ubuntu linux +1 moreThe virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users...CVE-2015-5247Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- gnu libtasn1, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used...CVE-2016-4008Fix availableEPSS 29.4%5.9 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when...CVE-2016-4001Fix available8.6 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreDenial of service or RCE from libxml2 and libxsltCVE-2015-8806Fix available7.5 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects...CVE-2016-3156Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the...CVE-2016-2184Public exploitFix available4.6 Medium
- xen, canonical ubuntu linux +1 moreThe __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly...CVE-2016-3157Fix available7.8 High
- samba, canonical ubuntu linux, debian linux +2 moreThe MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before...CVE-2016-2118Public exploitFix availableEPSS 37.2%7.5 High
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB...CVE-2016-2115Fix availableEPSS 10.2%5.9 Medium
- samba, canonical ubuntu linux +1 moreThe SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before...CVE-2016-2114Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509...CVE-2016-2113Fix available7.4 High
- samba, canonical ubuntu linux +1 moreThe bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x...CVE-2016-2112Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreThe NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4...CVE-2016-2111Fix available6.3 Medium
- samba, canonical ubuntu linux +1 moreThe NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,...CVE-2016-2110Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly...CVE-2015-5370Fix availableEPSS 19.1%5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- optipng project optipng, canonical ubuntu linux, debian linux +2 more +4 moreOff-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows...CVE-2016-3982Fix available8.8 High
- optipng project optipng, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6...CVE-2016-3981Fix available7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local...CVE-2016-2858Fix available6.5 Medium
- optipng, canonical ubuntu linux, debian linux +2 more +4 moreThe bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers...CVE-2016-2191Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux +1 moreHeap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in...CVE-2016-3947Fix availableEPSS 14.6%8.2 High
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreStack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C...CVE-2016-3075Fix available7.5 High
- google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome...CVE-2016-3679Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 moreThe Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome...CVE-2016-1649Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 moreUse-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser...CVE-2016-1647Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...CVE-2016-1646In KEVFix availableEPSS 48.1%8.8 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- debian linux, canonical ubuntu linux +1 morept_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2...CVE-2016-2856Public exploitFix available8.4 High
- linux kernel, canonical ubuntu linux +1 moreInteger overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux...CVE-2016-3135Public exploitFix available7.8 High
- isc dhcp, canonical ubuntu linux, debian linux +2 moreISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number...CVE-2016-2774Fix availableEPSS 73.6%5.9 Medium
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...CVE-2016-1286Fix availableEPSS 60.8%8.6 High
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...CVE-2016-1285Fix availableEPSS 57.8%6.8 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x...CVE-2015-7560Fix availableEPSS 12.9%6.5 Medium
- qemu, canonical ubuntu linux +1 moreThe ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before...CVE-2016-2841Fix available6.0 Medium
- jasper project jasper, canonical ubuntu linux +1 moreMemory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote...CVE-2016-2116Fix available5.7 Medium
- jasper project jasper, canonical ubuntu linux +1 moreDouble free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier...CVE-2016-1577Fix available7.6 High
- perl, canonical ubuntu linux, debian linux +7 more +9 morePerl might allow context-dependent attackers to bypass the taint protection mechanism in a child...CVE-2016-2381Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...CVE-2016-0797Fix availableEPSS 27.0%7.5 High
- Show moreLoading…