Skip to contentCanonical vulnerabilities
Newest
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders...CVE-2018-16750Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c...CVE-2018-16749Fix available6.5 Medium
- canonical ubuntu linux, orca management organization co., ltd. ubuntu14.04 orca(online receipt computer advantage)4.8.0(panda-client2) 1:1.4.9+p41-u4jma1 and earlier, ubuntu14.04 orca(online receipt computer advantage)5.0.0(panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and ubuntu16.04 orca(online receipt computer advantage)5.0.0(panda-client2) 1:2.0.0+p48-u5jma1 and earlier +1 moreBuffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1...CVE-2018-06446.5 Medium
- orcamo online receipt computer advantage, canonical ubuntu linux, orca management organization co., ltd. ubuntu14.04 orca(online receipt computer advantage)4.8.0(panda-server) 1:1.4.9+p41-u4jma1 and earlier +2 moreUbuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-server) 1:1.4.9+p41-u4jma1 and...CVE-2018-06436.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 4.18.6. An information leak in...CVE-2018-16658Fix available6.1 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreIn Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...CVE-2018-16646Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThere is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and...CVE-2018-16645Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThere is a missing check for length in the functions ReadDCMImage of coders/dcm.c and...CVE-2018-16644Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders...CVE-2018-16643Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a...CVE-2018-16642Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.CVE-2018-16640Fix available6.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 more** DISPUTED ** An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys...CVE-2018-16585Fix availableDisputed7.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...CVE-2018-12375Fix available8.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreIn Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have...CVE-2018-16543Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16542Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16541Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...CVE-2018-16540Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16539Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +2 more +4 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-16513Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...CVE-2018-16511Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +2 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the ...CVE-2018-16510Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...CVE-2018-16509Public exploitFix availableEPSS 92.3%7.8 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...CVE-2018-14618Fix availableEPSS 10.7%7.5 High
- zsh, canonical ubuntu linux +1 moreAn issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated,...CVE-2018-13259Fix available9.8 Critical
- zsh, canonical ubuntu linux +1 moreAn issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled,...CVE-2018-0502Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda...CVE-2018-6555Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net...CVE-2018-6554Fix available5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...CVE-2018-16435Fix available5.5 Medium
- gnome glib, canonical ubuntu linux +1 moreGNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in...CVE-2018-16429Fix available7.5 High
- gnome glib, canonical ubuntu linux +1 moreIn GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer...CVE-2018-16428Fix available9.8 Critical
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial...CVE-2018-16336Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when...CVE-2018-16323Public exploitFix availableEPSS 48.9%6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17...CVE-2018-16276Fix available7.8 High
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- fig2dev project fig2dev, canonical ubuntu linux +1 moreA buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to...CVE-2018-16140Fix available7.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...CVE-2018-15908Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted...CVE-2018-10938Fix available5.9 Medium
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...CVE-2011-2767Fix available9.8 Critical
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2...CVE-2018-15864Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before...CVE-2018-15863Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could...CVE-2018-15862Fix available5.5 Medium
- Show moreLoading…