Skip to contentCanonical vulnerabilities
Newest
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11683Fix available8.8 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function...CVE-2018-11656Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function...CVE-2018-11655Fix available6.5 Medium
- bouncycastle legion-of-the-bouncy-castle-java-crytography-api, canonical ubuntu linux, netapp 7-mode transition tool +2 more +4 moreIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validateCVE-2016-1000338Fix available7.5 High
- strongswan, canonical ubuntu linux, debian linux +2 moreIn stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer...CVE-2018-5388Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a...CVE-2018-11625Fix available8.8 High
- graphviz, canonical ubuntu linux, fedoraproject fedora +2 moreNULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the...CVE-2018-10196Fix available5.5 Medium
- apport project apportApport treats the container PID as the global PID when /proc/<global_pid>/ is missingCVE-2018-6552Fix available7.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.CVE-2018-11577Fix available8.8 High
- git-scm git, canonical ubuntu linux +1 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...CVE-2018-11233Fix available7.5 High
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1061Fix available6.5 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1060Fix available4.3 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.CVE-2018-11531Fix available9.8 Critical
- git-scm git, canonical ubuntu linux, debian linux +5 more +7 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...CVE-2018-11235Public exploitFix availableEPSS 47.4%7.8 High
- strongswan, canonical ubuntu linux, debian linux +1 more +3 morestrongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a...CVE-2018-10811Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreThe compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local...CVE-2018-11508Public exploitFix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows...CVE-2018-11506Fix available7.8 High
- giflib project giflib, sam2p project sam2p, canonical ubuntu linux +1 more +3 moreThe DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later...CVE-2018-11490Fix available8.8 High
- haproxy, canonical ubuntu linux +1 moreIncorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0...CVE-2018-11469Fix available5.9 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11440Fix available8.8 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a...CVE-2018-11412Public exploitFix availableEPSS 15.6%5.9 Medium
- liblouis, canonical ubuntu linux +1 moreAn issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in...CVE-2018-11410Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-2767Fix available3.1 Low
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...CVE-2018-5185Fix available6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...CVE-2018-5184Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....CVE-2018-5170Fix available4.3 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...CVE-2018-5162Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...CVE-2018-5161Fix available4.3 Medium
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- debian linux, kernel drivers, linux kernel +1 more +3 morekernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's...CVE-2018-1108Fix available5.9 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the...CVE-2017-18273Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the...CVE-2017-18271Fix available6.5 Medium
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +8 more +10 moreprocps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.*...CVE-2018-1126Fix available4.8 Medium
- debian linux, procps-ng project procps-ng, [unknown] procps-ng, procps +2 more +4 moreprocps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This...CVE-2018-1125Fix available4.4 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...CVE-2018-1124Public exploitFix available7.3 High
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +1 more +3 moreprocps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer...CVE-2018-1123Public exploitFix available3.9 Low
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +1 more +3 moreprocps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user...CVE-2018-1122Public exploitFix available7.3 High
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file...CVE-2018-1120Public exploitFix available2.8 Low
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014Fix availableEPSS 20.9%9.8 Critical
- ijg libjpeg, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote...CVE-2018-11214Fix available6.5 Medium
- ijg libjpeg, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote...CVE-2018-11213Fix available6.5 Medium
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...CVE-2018-11212Fix available6.5 Medium
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...CVE-2018-1000301Fix available9.1 Critical
- haxx curl, canonical ubuntu linux +1 morecurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...CVE-2018-1000300Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has...CVE-2018-10999Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to...CVE-2018-10998Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a text string that happens to be a filename in the operating system's native format is dragged...CVE-2018-5182Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...CVE-2018-5181Fix available7.5 High
- Show moreLoading…