Skip to contentCanonical vulnerabilities
Newest
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could...CVE-2018-15861Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in...CVE-2018-15859Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp...CVE-2018-15858Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreAn invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1...CVE-2018-15857Fix available7.8 High
- xkbcommon, canonical ubuntu linux +1 moreAn infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in...CVE-2018-15856Fix available5.5 Medium
- xkbcommon project xkbcommon, canonical ubuntu linux +1 moreUnchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash ...CVE-2018-15855Fix available5.5 Medium
- xkbcommon project xkbcommon, canonical ubuntu linux +1 moreUnchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash ...CVE-2018-15854Fix available5.5 Medium
- xkbcommon libxkbcommon, xkbcommon, canonical ubuntu linux +2 moreEndless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which...CVE-2018-15853Fix available5.5 Medium
- x.org libx11, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c...CVE-2018-14600Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...CVE-2018-14599Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious...CVE-2018-14598Fix available7.5 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an...CVE-2018-15822Fix available7.5 High
- gnome pango, canonical ubuntu linux +1 morelibpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote...CVE-2018-15120Public exploitFix availableEPSS 11.4%6.5 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...CVE-2018-10846Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...CVE-2018-10845Fix available5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...CVE-2018-10844Fix available5.9 Medium
- base-files project base-files, canonical ubuntu linux +1 moreInsecure temporary file use in base-filesCVE-2018-6557Fix available7.0 High
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...CVE-2018-10902Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls,...CVE-2018-15594Fix available5.5 Medium
- libgd, canonical ubuntu linux, debian linux +2 moreLibgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function...CVE-2018-1000222Fix available8.8 High
- debian advanced package tool, canonical ubuntu linux +1 moreThe mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x...CVE-2018-0501Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel...CVE-2018-15572Fix available6.5 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- linux kernel, xen, canonical ubuntu linux +2 moreAn issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux...CVE-2018-15471Fix available7.8 High
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...CVE-2018-10873Fix available8.3 High
- samba, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreA flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1...CVE-2018-1139Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because...CVE-2018-10919Fix available4.3 Medium
- samba, canonical ubuntu linux +1 moreA null pointer dereference flaw was found in the way samba checked database outputs from the LDB...CVE-2018-10918Fix available5.2 Medium
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...CVE-2018-10858Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +48 more +50 moreThe Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Public exploitFix availableEPSS 32.1%7.5 High
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreIt was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed...CVE-2018-10925Fix available7.1 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...CVE-2018-10915Fix available8.5 High
- canonical ubuntu linux, debian linux, w1.fi wpa supplicant +2 moreAn issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain...CVE-2018-14526Fix available6.5 Medium
- hewlett packard enterprise hpe moonshot provisioning manager, hp moonshot provisioning manager, canonical ubuntu linux +2 moreA local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning...CVE-2018-70735.5 Medium
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- debian linux, linux kernel, a10networks advanced core operating system +35 more +37 moreLinux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of serviceCVE-2018-5390Fix availableEPSS 71.8%7.5 High
- apple icloud, itunes, safari +3 more +5 moreIn Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1,...CVE-2018-4278Fix available4.3 Medium
- apple icloud, itunes, safari +4 more +6 moreIn Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1,...CVE-2018-4262Fix available8.8 High
- digitalcorpora tcpflow, canonical ubuntu linux +1 moreAn issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an...CVE-2018-14938Fix available9.1 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x...CVE-2018-14883Fix available7.5 High
- google android, linux kernel, canonical ubuntu linux +1 more +3 moreIn the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out...CVE-2018-9363Fix available8.4 High
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5812Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5811Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5810Fix available8.8 High
- libraw, canonical ubuntu linux +1 moreAn error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5807Fix available8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...CVE-2018-14851Fix available5.5 Medium
- canonical cloud-initThe default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"...CVE-2018-10896Fix available4.6 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango open redirectCVE-2018-14574Fix availableEPSS 25.5%6.1 Medium
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...CVE-2018-10916Fix available5.3 Medium
- Show moreLoading…