Skip to contentCanonical vulnerabilities
Newest
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to...CVE-2020-12866Fix available5.7 Medium
- gnu mailman, canonical ubuntu linux, debian linux +2 moreGNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private...CVE-2020-15011Fix available4.3 Medium
- nvidia virtual gpu, canonical ubuntu linux, nvidia vgpu software +2 moreNVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which...CVE-2020-5973Fix available4.4 Medium
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in...CVE-2020-5967Fix available4.7 Medium
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process...CVE-2020-5963Fix available7.8 High
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the...CVE-2020-12861Fix available8.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDPCVE-2020-11098Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDPCVE-2020-11097Public exploitFix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPCVE-2020-11096Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDPCVE-2020-11095Fix available3.5 Low
- rack project rack, canonical ubuntu linux, debian linux +2 moreRack allows Percent-encoded cookies to overwrite existing prefixed cookie namesCVE-2020-8184Fix available7.5 High
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...CVE-2020-14954Fix available5.9 Medium
- qemu, canonical ubuntu linux +1 moreoss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.CVE-2020-14415Fix available3.3 Low
- cisco amp for endpoints, clam antivirus, canonical ubuntu linux +3 more +5 moreCisco AMP for Endpoints and ClamAV Privilege Escalation VulnerabilityCVE-2020-3350Fix available5.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL...CVE-2020-14396Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL...CVE-2020-14397Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes...CVE-2020-14398Fix available7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14399Fix availableDisputed7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14400Fix availableDisputed7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds...CVE-2020-14402Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of...CVE-2020-14403Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds...CVE-2020-14404Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit...CVE-2020-14405Fix available6.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 morelibvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket...CVE-2019-20839Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a...CVE-2019-20840Fix available7.5 High
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- canonical ubuntu linux, isc bind, bind9 +2 more +4 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8618Fix available4.9 Medium
- mutt, canonical ubuntu linux +1 moreMutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt...CVE-2020-14154Fix available4.8 Medium
- mutt, canonical ubuntu linux, debian linux +1 more +3 moreMutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.CVE-2020-14093Fix available5.9 Medium
- packagekit, canonical ubuntu linux +1 morePackagekit's apt backend lets user install untrusted local packagesCVE-2020-16122Fix available8.2 High
- canonical whoopsieResource exhaustion vulnerability in whoopsieCVE-2020-11937Fix available5.5 Medium
- red hat openstack-cinder, canonical ubuntu linux +1 moreOpenstack cinder Improper handling of ScaleIO backend credentialsCVE-2020-10755Fix available6.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 more +4 moreAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...CVE-2020-10761Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 5.7.1. drivers/tty/vt/keyboard.c has an...CVE-2020-13974Fix available7.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreIf Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH...CVE-2020-12398Fix available7.5 High
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 moreA flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows...CVE-2020-10732Fix available3.3 Low
- canonical ubuntu linux, fedoraproject fedora, intel celeron 1000m +691 more +693 moreIncomplete cleanup from specific special register read operations in some Intel(R) Processors may...CVE-2020-0543Fix available5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...CVE-2020-0198Public exploitFix available7.5 High
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...CVE-2020-12695Public exploitFix availableEPSS 15.2%7.5 High
- debian linux, linuxtv xawtv, canonical ubuntu linux +3 more +5 moreAn issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does...CVE-2020-13696Fix available4.4 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because...CVE-2020-13904Fix available5.5 Medium
- pam tacplus project tacplus, arista cloudvision portal, canonical ubuntu linux +1 more +3 moreIn support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog...CVE-2020-13881Fix available7.5 High
- freedesktop dbus, canonical ubuntu linux +1 moreCVE-2020-12049 does not affect BellSoft softwareCVE-2020-12049Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 morerom_copy() in hw/core/loader.c in QEMU 4.1.0 does not validate the relationship between two...CVE-2020-13765Fix available5.6 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...CVE-2020-13800Fix available6.0 Medium
- Show moreLoading…