Skip to contentCanonical vulnerabilities
Newest
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...CVE-2018-17963Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 moreQemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer...CVE-2018-17958Fix available7.5 High
- net-snmp, canonical ubuntu linux, debian linux +7 more +9 more_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception...CVE-2018-18065Public exploitFix availableEPSS 17.5%6.5 Medium
- cisco clamav, canonical ubuntu linux, debian linux +2 moreClam AntiVirus unmew11() Denial of Service VulnerabilityCVE-2018-15378Fix available5.5 Medium
- pyopenssl project pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePyopenssl Incorrect Memory ManagementCVE-2018-1000808Fix available5.9 Medium
- pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 morePyOpenSSL Use-After-Free vulnerabilityCVE-2018-1000807Fix available8.1 High
- paramiko, canonical ubuntu linux, debian linux +8 more +10 moreParamiko Authentication Bypass vulnerabilityCVE-2018-1000805Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles...CVE-2018-18021Fix available7.1 High
- git-scm git, canonical ubuntu linux, debian linux +8 more +10 moreGit before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...CVE-2018-17456Public exploitFix availableEPSS 97.4%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat Open Redirect vulnerabilityCVE-2018-11784Public exploitFix availableEPSS 97.7%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel...CVE-2018-17972Fix available5.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...CVE-2018-12387Fix available9.1 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...CVE-2018-12386Public exploitFix availableEPSS 13.5%8.1 High
- google android, canonical ubuntu linux, debian linux +2 moreIn hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due...CVE-2018-9516Fix available7.8 High
- strongswan, canonical ubuntu linux, debian linux +2 moreThe gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.CVE-2018-17540Fix available7.5 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...CVE-2018-4213Fix available8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...CVE-2018-4212Fix available8.8 High
- apple itunes, safari, tvos +4 more +6 moreIn iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7...CVE-2018-4210Fix available8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...CVE-2018-4209Fix available8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...CVE-2018-4208Fix available8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...CVE-2018-4207Fix available8.8 High
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreCiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption...CVE-2018-17581Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 moreAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An...CVE-2018-14634In KEVPublic exploitFix availableEPSS 14.7%7.8 High
- apache http server, canonical ubuntu linux, netapp storage automation store +6 more +8 moreIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...CVE-2018-11763Fix availableEPSS 51.0%5.9 Medium
- strongswan, canonical ubuntu linux, debian linux +2 moreIn verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and...CVE-2018-16152Fix available7.5 High
- strongswan, canonical ubuntu linux, debian linux +2 moreIn verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and...CVE-2018-16151Fix available7.5 High
- python, canonical ubuntu linux, debian linux +5 more +7 morePython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....CVE-2018-14647Fix availableEPSS 10.9%5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in...CVE-2018-14633Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...CVE-2018-12385Fix available7.0 High
- freedesktop udisks, canonical ubuntu linux +1 moreUDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing...CVE-2018-17336Fix available7.8 High
- tug tex live, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live...CVE-2018-17407Fix available7.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreThe matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not...CVE-2018-17294Fix available6.5 Medium
- [unknown] haproxy, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreA flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...CVE-2018-14645Fix available7.5 High
- canonical ubuntu linux, debian linux, openvswitch +1 more +3 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function...CVE-2018-17206Fix available4.9 Medium
- canonical ubuntu linux, openvswitch, redhat openstack +2 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting...CVE-2018-17205Fix available7.5 High
- canonical ubuntu linux, debian linux, openvswitch +1 more +3 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting...CVE-2018-17204Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm...CVE-2018-17182Public exploitFix available7.8 High
- python, canonical ubuntu linux, debian linux +1 more +3 morePython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...CVE-2018-1000802Public exploitFix availableEPSS 20.1%9.8 Critical
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreApache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.CVE-2018-11781Fix available7.8 High
- apache spamassassin, pdfinfo project pdfinfo, canonical ubuntu linux +1 more +3 moreA potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin...CVE-2018-11780Fix availableEPSS 10.8%9.8 Critical
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreA denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2....CVE-2017-15705Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be...CVE-2018-17183Fix available7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools...CVE-2018-17101Fix available8.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools...CVE-2018-17100Fix available8.8 High
- audiofile, canonical ubuntu linux +1 moreAn issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0...CVE-2018-17095Fix available8.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreA NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from...CVE-2018-17000Fix available6.5 Medium
- google android, canonical ubuntu linux +1 moreIn nfc_llcp_build_sdreq_tlv of llcp_commands.c, there is a possible out of bounds write due to a...CVE-2018-9518Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege"...CVE-2018-16802Fix available7.8 High
- [unknown] kernel, debian linux, canonical ubuntu linux +2 moreA flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read...CVE-2018-14625Fix available5.3 Medium
- Show moreLoading…