Skip to contentCanonical vulnerabilities
Newest
- canonical c-kernel, pc-kernel +1 moreUbuntu kernel snap build process could use unauthenticated sourcesCVE-2019-114808.4 High
- git, canonical ubuntu linux, debian linux +2 more +4 moremalicious URLs may cause Git to present stored credentials to the wrong serverCVE-2020-5260Public exploitFix availableEPSS 14.9%9.3 Critical
- gnome file-roller, canonical ubuntu linux, debian linux +2 morefr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during...CVE-2020-11736Fix available3.9 Low
- canonical extplorereXtplorer exposes /usr and /etc/extplorer over HTTPCVE-2019-73055.8 Medium
- libssh, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreA flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR ...CVE-2020-1730Fix available5.3 Medium
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- canonical microk8sMicrok8s Privilege Escalation VulnerabilityCVE-2019-157898.8 High
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media...CVE-2020-11609Fix available4.3 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows...CVE-2020-11608Fix available4.3 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...CVE-2020-1760Fix available5.8 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreLinux kernel KVM Power8 conflicting use of HSTATE_HOST_R1CVE-2020-8834Fix available6.5 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a...CVE-2020-11565Fix availableDisputed6.0 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2....CVE-2020-11494Fix available4.4 Medium
- apport project apport, canonical ubuntu linux +1 moreApport race condition in crash report permissionsCVE-2020-8833Fix available5.6 Medium
- apport project apport, canonical ubuntu linux +1 moreWorld writable root owned lock file created in user controllable locationCVE-2020-8831Fix available6.5 Medium
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...CVE-2020-11100Fix availableEPSS 61.6%8.8 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moremb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullCVE-2020-7065Fix available7.4 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +3 more +5 moreAn out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal...CVE-2020-1751Fix available5.1 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +24 more +26 moreLinux kernel bpf verifier vulnerabilityCVE-2020-8835Public exploitFix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an...CVE-2020-10942Fix available5.3 Medium
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreInfinite Loop in Apache TikaCVE-2020-1951Fix available5.5 Medium
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreUncontrolled Resource Consumption in Apache TikaCVE-2020-1950Fix available5.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreSquid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname)...CVE-2019-18860Fix available6.1 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 morelibvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and...CVE-2019-20788Fix available9.8 Critical
- bluez, canonical ubuntu linux, debian linux +1 more +3 moreImproper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...CVE-2020-0556Fix available7.1 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- twisted, canonical ubuntu linux, debian linux +3 more +5 moreImproper Input Validation in TwistedCVE-2020-10108Fix available9.8 Critical
- twisted, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in TwistedCVE-2020-10109Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...CVE-2020-6814Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe first time AirPods are connected to an iPhone, they become named after the user's name by...CVE-2020-6812Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...CVE-2020-6811Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...CVE-2020-6807Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...CVE-2020-6806Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...CVE-2020-6805Fix available8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...CVE-2020-1752Fix available7.0 High
- usrsctp project usrsctp, canonical ubuntu linux, debian linux +2 moreusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.CVE-2019-20503Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...CVE-2019-20382Fix available3.5 Low
- timeshift project timeshift, canonical ubuntu linux, fedoraproject fedora +2 moreinit_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting...CVE-2020-10174Fix available7.0 High
- canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 moreUbuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615CVE-2020-8832Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 moreSQL injection in DjangoCVE-2020-9402Fix availableEPSS 24.0%8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- pureftpd pure-ftpd, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been...CVE-2020-9274Fix available7.5 High
- opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moreOpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in...CVE-2020-8794Public exploitFix availableEPSS 88.9%9.8 Critical
- opensmtpd, canonical ubuntu linux, fedoraproject fedora +2 moreOpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux...CVE-2020-8793Public exploitFix available4.7 Medium
- Show moreLoading…