Skip to contentCanonical vulnerabilities
Newest
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...CVE-2020-10757Public exploitFix available7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and...CVE-2019-20811Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some...CVE-2020-12410Fix available8.8 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 morego7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not...CVE-2019-20810Fix available5.5 Medium
- websocket-extensions project websocket-extensions, canonical ubuntu linux, debian linux +2 moreRegular Expression Denial of Service in websocket-extensions (RubyGem)CVE-2020-7663Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 morehw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...CVE-2020-13754Fix available6.7 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...CVE-2020-13659Fix available2.5 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal,...CVE-2020-12406Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...CVE-2020-12405Fix available5.3 Medium
- python-rsa project python-rsa, canonical ubuntu linux, fedoraproject fedora +2 morePython-RSA decryption of ciphertext leads to DoSCVE-2020-13757Fix available7.5 High
- sane-project sane backends, canonical ubuntu linux, debian linux +2 more +4 moreA NULL pointer dereference in sanei_epson_net_read in SANE Backends through 1.0.29 allows a...CVE-2020-12867Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...CVE-2020-13362Fix available3.2 Low
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...CVE-2020-13361Fix available3.9 Low
- vim, apple mac os x, canonical ubuntu linux +4 more +6 moreIn Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS...CVE-2019-20807Fix available5.3 Medium
- gnome balsa, glib-networking, broadcom fabric operating system +3 more +5 moreIn GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...CVE-2020-13645Fix available6.5 Medium
- sympa, canonical ubuntu linux, debian linux +1 more +3 moreSympa before 6.2.56 allows privilege escalation.CVE-2020-10936Fix available7.8 High
- phpmailer project phpmailer, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient output escaping of attachment names in PHPMailerCVE-2020-13625Fix available7.5 High
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 High
- sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...CVE-2020-13631Fix available5.5 Medium
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moresd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of...CVE-2020-13253Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....CVE-2020-12829Fix available3.8 Low
- sqlite, apple icloud, ipados +15 more +17 moreSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.CVE-2020-13434Fix available5.5 Medium
- debian netqmail, canonical ubuntu linux, debian linux +2 moreqmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A...CVE-2020-3812Fix available5.5 Medium
- debian netqmail, canonical ubuntu linux, debian linux +2 moreqmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.CVE-2020-3811Fix available7.5 High
- rack project rack, canonical ubuntu linux, debian linux +2 moreDirectory traversal in Rack::Directory app bundled with RackCVE-2020-8161Fix available8.6 High
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has...CVE-2020-13398Public exploitFix available8.3 High
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has...CVE-2020-13397Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has...CVE-2020-13396Fix available7.1 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote...CVE-2020-13113Fix available8.2 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote...CVE-2020-13112Fix available9.1 Critical
- libexif project libexif, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF...CVE-2020-13114Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...CVE-2020-6463Fix available8.8 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is...CVE-2020-10724Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an...CVE-2020-10723Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...CVE-2020-10722Fix available5.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11526Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11525Fix available2.2 Low
- freerdp, canonical ubuntu linux, opensuse leap +2 moreUpdated freerdp/remmina packages fix security vulnerabilityCVE-2020-11524Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11523Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11522Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11521Fix available6.6 Medium
- Show moreLoading…