Skip to contentCanonical vulnerabilities
Newest
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filtersCVE-2018-7537Fix available5.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango denial-of-service possibility in urlize and urlizetrunc template filtersCVE-2018-7536Fix available5.3 Medium
- exempi project exempi, canonical ubuntu linux +1 moreAn issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp...CVE-2018-7731Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is...CVE-2018-7730Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux +1 moreAn issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the...CVE-2018-7729Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp...CVE-2018-7728Fix available5.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the...CVE-2018-7726Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered...CVE-2018-7725Fix available6.5 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 moreThe protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of...CVE-2018-7185Fix available7.5 High
- ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 morentpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,...CVE-2018-7184Fix available7.5 High
- ntp, canonical ubuntu linux, netapp element software +2 moreThe ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a...CVE-2018-7182Public exploitFix availableEPSS 28.8%7.5 High
- gpac project gpac, canonical ubuntu linux +1 moreGPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia...CVE-2018-1000100Fix available7.8 High
- cisco clamav, canonical ubuntu linux, debian linux +2 moreclamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated,...CVE-2018-0202Public exploitFix available5.5 Medium
- memcached, canonical ubuntu linux, debian linux +1 more +3 moreMemcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network...CVE-2018-1000115Public exploitFix availableEPSS 88.0%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs...CVE-2018-1066Fix available6.5 Medium
- php, canonical ubuntu linux, debian linux +2 moreIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...CVE-2018-7584Public exploitFix availableEPSS 87.3%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local...CVE-2018-7550Fix available8.8 High
- isc dhcp, canonical ubuntu linux, debian linux +5 more +7 moreA malicious client can overflow a reference counter in ISC dhcpdCVE-2018-5733Fix availableEPSS 20.2%5.9 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function...CVE-2017-18211Fix available9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreIn the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL...CVE-2017-18209Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +7 more +9 moreApache Tomcat unauthorized access vulnerabilityCVE-2018-1304Public exploitFix availableEPSS 17.1%5.9 Medium
- postgresql, canonical ubuntu linux, redhat cloudforms +2 moreA flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...CVE-2018-1058Public exploitFix availableEPSS 13.1%8.8 High
- dovecot, canonical ubuntu linux, debian linux +2 moreA denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random...CVE-2017-15130Fix available5.9 Medium
- zsh, canonical ubuntu linux +1 moreIn subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an...CVE-2018-7548Fix available9.8 Critical
- zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreIn params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as...CVE-2018-7549Fix available7.5 High
- clamav, canonical ubuntu linux, debian linux +2 moreClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR...CVE-2018-1000085Fix available5.5 Medium
- zsh, canonical ubuntu linux +1 moreIn utils.c in zsh before 5.4, symlink expansion had a buffer overflow.CVE-2017-18206Fix available9.8 Critical
- zsh, canonical ubuntu linux +1 moreIn zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to...CVE-2016-10714Fix available9.8 Critical
- zsh, canonical ubuntu linux +1 moreIn exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.CVE-2014-10071Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreA NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux...CVE-2018-7492Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local...CVE-2018-7480Fix available7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreA NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3...CVE-2018-7456Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly...CVE-2018-7443Fix available6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreApache Tomcat information exposure vulnerabilityCVE-2018-1305Public exploitFix availableEPSS 14.5%6.5 Medium
- wavpack, canonical ubuntu linux, debian linux +2 moreThe ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote...CVE-2018-7253Fix available7.8 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in...CVE-2018-7225Fix available9.8 Critical
- quagga bgpd, quagga, canonical ubuntu linux +1 more +3 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent...CVE-2018-5378EPSS 74.2%7.1 High
- apple cups, canonical ubuntu linux, debian linux +2 moreA localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2...CVE-2017-18190Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free...CVE-2018-7054Fix available9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free...CVE-2018-7053Fix available9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows...CVE-2018-7052Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could...CVE-2018-7051Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference...CVE-2018-7050Fix available7.5 High
- freetype, canonical ubuntu linux +1 moreAn issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the...CVE-2018-6942Fix available6.5 Medium
- systemd project systemd, canonical ubuntu linux, opensuse leap +2 moresystemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path...CVE-2018-6954Fix available7.8 High
- gnu patch, canonical ubuntu linux +1 moreAn issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated...CVE-2018-6951Fix available7.5 High
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in...CVE-2018-5381Fix availableEPSS 30.2%6.5 Medium
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string...CVE-2018-5380Fix availableEPSS 14.8%4.3 Medium
- quagga bgpd, quagga, canonical ubuntu linux +7 more +9 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing...CVE-2018-5379Fix availableEPSS 38.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...CVE-2018-6927Fix available7.8 High
- Show moreLoading…