Skip to contentCanonical vulnerabilities
Newest
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreType confusion in shiftfsCVE-2019-15792Public exploit7.1 High
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreReference count underflow in shiftfsCVE-2019-15791Public exploit7.1 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- intel graphics driver, canonical ubuntu linux, intel atom x5-e3930 firmware +354 more +356 moreInsufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and...CVE-2019-0155Fix available7.8 High
- canonical ubuntu linux, intel atom x5-a3930 firmware, atom x5-a3940 firmware +145 more +147 moreInsufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and...CVE-2019-0154Fix available5.5 Medium
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- tnef project tnef, canonical ubuntu linux, debian linux +1 more +3 moreIn tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file...CVE-2019-18849Fix available5.5 Medium
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 moreReference counting error in overlayfs/shiftfs error path when used in conjuction with aufsCVE-2019-15794Public exploitFix available7.1 High
- debian lintian, canonical ubuntu linux, debian linux +2 moreLintian before 2.5.12 allows remote attackers to gather information about the "host" system using...CVE-2013-1429Fix available6.3 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux...CVE-2019-18808Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in...CVE-2019-18809Fix available4.6 Medium
- linux kernel, canonical ubuntu linux +1 moreA memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda...CVE-2019-18810Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreA memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel...CVE-2019-18813Fix available7.5 High
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at...CVE-2019-18804Fix available7.5 High
- google android, canonical ubuntu linux +1 moreIn generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds...CVE-2019-2201Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in...CVE-2019-18786Fix available5.5 Medium
- mesa3d mesa, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D...CVE-2019-5068Fix available5.1 Medium
- oracle mysql, canonical ubuntu linux, mariadb +5 more +7 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2922Fix available3.7 Low
- debian linux, linux kernel, broadcom fabric operating system +15 more +17 moreAn issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is...CVE-2019-18683Public exploitFix available7.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360...CVE-2019-11758Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in...CVE-2019-10220Public exploitFix available8.0 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in...CVE-2019-15681Fix available7.5 High
- apport project apport, canonical ubuntu linux +1 moreApport reads PID files with elevated privilegesCVE-2019-15790Fix available2.8 Low
- apport project apport, canonical ubuntu linux +1 moreapport created lock file in wrong directoryCVE-2019-11485Fix available3.3 Low
- canonical whoopsie, ubuntu linux +1 moreInteger overflow in bson_ensure_spaceCVE-2019-11484Fix available6.3 Medium
- apport project apport, canonical ubuntu linux +1 moreSander Bos discovered Apport mishandled crash dumps originating from containers. This could be...CVE-2019-11483Fix available7.0 High
- apport project apport, canonical ubuntu linux +1 moreRace condition between reading current working directory and writing a core dumpCVE-2019-11482Fix available4.2 Medium
- libarchive, canonical ubuntu linux, debian linux +2 morearchive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0...CVE-2019-18408Fix available7.5 High
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 69 and...CVE-2019-11764Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly handle null bytes when processing HTML entities resulted in Firefox...CVE-2019-11763Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf two same-origin documents set document.domain differently to become cross-origin, it was...CVE-2019-11762Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy using a form with a data URI it was possible to gain access to the privileged JSONView object...CVE-2019-11761Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted...CVE-2019-11760Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer...CVE-2019-11759Fix available8.8 High
- loofah project loofah, canonical ubuntu linux, debian linux +1 more +3 moreLoofah Allows Cross-site ScriptingCVE-2019-15587Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen following the value's prototype chain, it was possible to retain a reference to a locale,...CVE-2019-11757Fix available8.8 High
- file project file, canonical ubuntu linux, debian linux +3 more +5 morecdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR...CVE-2019-18218Fix available7.8 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +2 moreNokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerabilityCVE-2019-18197Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 morertl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6...CVE-2019-17666Public exploitFix available8.8 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress()...CVE-2019-181987.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2019-3018Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported...CVE-2019-3011Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection)....CVE-2019-3009Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2019-3004Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions...CVE-2019-2999Fix available4.7 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2998Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2019-2997Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported...CVE-2019-2993Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2992Fix available3.7 Low
- Show moreLoading…