Skip to contentCanonical vulnerabilities
Newest
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9325Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libexif, there is a possible out of bounds write due to an integer overflow. This could lead...CVE-2019-9278Fix available8.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9232Fix available7.5 High
- netty, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in NettyCVE-2019-16869Fix available7.5 High
- novnc, canonical ubuntu linux, debian linux +1 more +3 moreCross-Site Scripting in @novnc/novncCVE-2017-18635Public exploitFix available6.1 Medium
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not...CVE-2019-16746Public exploitFix availableEPSS 12.7%9.8 Critical
- pam-python project pam-python, canonical ubuntu linux, debian linux +2 morepam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of...CVE-2019-16729Fix available7.8 High
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...CVE-2019-5094Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.CVE-2019-16708Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, opensuse backports +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.CVE-2019-16709Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in...CVE-2019-16710Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.CVE-2019-16711Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in...CVE-2019-16713Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, f5 traffix signaling delivery controller +2 moreIn the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to...CVE-2019-16714Fix available7.5 High
- gnome file-roller, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path...CVE-2019-16680Fix available4.3 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreIn QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...CVE-2019-12068Fix available3.8 Low
- debian linux, linux kernel, canonical ubuntu linux +25 more +27 moreAn out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way...CVE-2019-14821Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published...CVE-2019-16391Fix available6.5 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.CVE-2019-16392Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a...CVE-2019-16393Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password...CVE-2019-16394Public exploitFix available5.3 Medium
- infradead openconnect, canonical ubuntu linux, debian linux +2 more +4 moreprocess_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server...CVE-2019-16239Fix available9.8 Critical
- trusteddomain opendmarc, canonical ubuntu linux, debian linux +1 more +3 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass...CVE-2019-16378Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...CVE-2019-14835Fix available7.2 High
- ibus project ibus, canonical ubuntu linux, oracle zfs storage appliance kit +1 more +3 moreA flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls...CVE-2019-14822Fix available7.1 High
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morehostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection...CVE-2019-16275Fix available6.5 Medium
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of a carbons message in module/xep...CVE-2019-16235Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.CVE-2019-16236Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of an MAM message in module/xep...CVE-2019-16237Fix available7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moredrivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the...CVE-2019-16229Fix availableDisputed4.1 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moredrivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return...CVE-2019-16231Fix available4.1 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moredrivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the...CVE-2019-16232Fix available4.1 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moredrivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue...CVE-2019-16233Fix available4.1 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moredrivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the...CVE-2019-16234Fix available4.7 Medium
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- oniguruma project oniguruma, canonical ubuntu linux, debian linux +1 more +3 moreOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.CVE-2019-16163Fix available7.5 High
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 more +4 moresysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in...CVE-2019-16167Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moreIn the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector...CVE-2019-15031Fix available4.4 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moreIn the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector...CVE-2019-15030Fix available4.4 Medium
- symonics libmysofa, canonical ubuntu linux +1 moreSymonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.CVE-2019-16091Fix available7.5 High
- symonics libmysofa, canonical ubuntu linux +1 moreSymonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.CVE-2019-16092Fix available9.8 Critical
- symonics libmysofa, canonical ubuntu linux +1 moreSymonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.CVE-2019-16093Fix available9.8 Critical
- symonics libmysofa, canonical ubuntu linux +1 moreSymonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.CVE-2019-16094Fix available7.5 High
- symonics libmysofa, canonical ubuntu linux +1 moreSymonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.CVE-2019-16095Fix available7.5 High
- google android, canonical ubuntu linux +1 moreIn the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper...CVE-2019-9453Fix available4.4 Medium
- google android, canonical ubuntu linux, debian linux +2 moreIn the Android kernel in F2FS driver there is a possible out of bounds read due to a missing...CVE-2019-9445Fix available4.4 Medium
- libgcrypt20 project libgcrypt20, canonical ubuntu linux, opensuse leap +3 more +5 moreIt was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library....CVE-2019-13627Fix available6.3 Medium
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...CVE-2019-16056Fix available7.5 High
- Show moreLoading…