Skip to contentCanonical vulnerabilities
Newest
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a...CVE-2018-19535Fix available6.5 Medium
- git-scm git, canonical ubuntu linux +1 moreGit before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '...CVE-2018-19486Fix available9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19477Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...CVE-2018-19476Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19475Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked...CVE-2018-19409Fix available9.8 Critical
- linux kernel, canonical ubuntu linux +1 moreThe vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows...CVE-2018-19407Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 more +4 morehw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...CVE-2018-19364Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c...CVE-2018-18955Public exploitFix available7.0 High
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...CVE-2018-5407Public exploitFix available4.7 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...CVE-2018-18954Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in...CVE-2018-19210Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 morePoppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from...CVE-2018-19149Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer...CVE-2018-19108Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image...CVE-2018-19107Fix available6.5 Medium
- postgresql, canonical ubuntu linux, redhat enterprise linux +2 morepostgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and...CVE-2018-16850Fix available8.0 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection...CVE-2019-2503Fix available6.4 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h...CVE-2018-19060Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in...CVE-2018-19059Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...CVE-2018-19058Fix available6.5 Medium
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might...CVE-2018-16845Fix available8.2 High
- [unknown] nginx, apple xcode, canonical ubuntu linux +1 more +3 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16844Fix availableEPSS 12.7%5.3 Medium
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16843Public exploitFix availableEPSS 48.0%5.3 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:...CVE-2018-18897Fix available6.5 Medium
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an...CVE-2018-18849Fix available5.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...CVE-2018-17466Fix available8.8 High
- qemu, [unknown] qemu:, canonical ubuntu linux +2 moreAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It...CVE-2018-16847Fix available7.0 High
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-18873Fix available5.5 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...CVE-2018-16842Fix available4.4 Medium
- curl, canonical ubuntu linux +1 moreA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...CVE-2018-16840Fix available4.3 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...CVE-2018-16839Fix available4.3 Medium
- openssl, canonical ubuntu linux, debian linux +16 more +18 moreTiming attack against DSACVE-2018-0734Fix availableEPSS 12.2%5.9 Medium
- openssl, canonical ubuntu linux, debian linux +19 more +21 moreTiming attack against ECDSA signature generationCVE-2018-0735Fix available5.9 Medium
- gnu gettext, canonical ubuntu linux, redhat enterprise linux +2 moreAn issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in...CVE-2018-18751Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.19. An information leak in...CVE-2018-18710Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreSince Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping...CVE-2018-18281Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem...CVE-2018-18690Fix available5.5 Medium
- libtiff, canonical ubuntu linux +1 moreAn issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function...CVE-2018-18661Fix available6.5 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...CVE-2018-16396Fix available8.1 High
- ruby-lang openssl, ruby, canonical ubuntu linux +2 more +4 moreRuby Openssl Allows Incorrect Value ComparisonCVE-2018-16395Fix availableEPSS 10.7%9.8 Critical
- systemd, canonical ubuntu linux, debian linux +6 more +8 moreOut-of-Bounds write in systemd-networkd dhcpv6 option handlingCVE-2018-15688Fix available8.8 High
- systemd, canonical ubuntu linux +1 moresystemd: chown_one() can dereference symlinksCVE-2018-15687Public exploitFix available7.8 High
- systemd, canonical ubuntu linux, debian linux +1 more +3 moresystemd: reexec state injection: fgets() on overlong lines leads to line splittingCVE-2018-15686Public exploitFix available7.0 High
- canonical ubuntu linuxThe Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows...CVE-2018-18653Fix available7.8 High
- x.org x server, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath...CVE-2018-14665Public exploitFix availableEPSS 27.2%6.6 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...CVE-2018-12403Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe internal WebBrowserPersist code does not use correct origin context for a resource being...CVE-2018-12402Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreSome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...CVE-2018-12401Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen a new protocol handler is registered, the API accepts a title argument which can be used to...CVE-2018-12399Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...CVE-2018-12398Fix available6.5 Medium
- Show moreLoading…