Skip to contentCanonical vulnerabilities
Newest
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2020-14575Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-14568Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-14559Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth)....CVE-2020-14553Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-14550Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14547Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2020-14540Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14539Fix available6.5 Medium
- canonical snapd, ubuntu linux +1 moreSandbox escape vulnerability via snapctl user-open (xdg-open)CVE-2020-11934Fix available5.9 Medium
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache TomcatCVE-2020-13935Public exploitFix availableEPSS 86.6%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934Fix availableEPSS 64.1%7.5 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2020-14621Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14593Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14583Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14581Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14579Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14578Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)....CVE-2020-14577Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions...CVE-2020-14573Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions...CVE-2020-14562Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14556Fix available4.8 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreThe bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block...CVE-2020-13753Fix available10.0 Critical
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security updateCVE-2020-10756Fix available6.5 Medium
- gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 moreevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...CVE-2020-14928Fix available5.9 Medium
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...CVE-2020-14303Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11,...CVE-2020-10760Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...CVE-2020-12421Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...CVE-2020-12420Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen processing callbacks that occurred during window flushing in the parent process, the...CVE-2020-12419Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...CVE-2020-12418Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...CVE-2020-12417Fix available8.8 High
- libvncserver project libvncserver, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreIt was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...CVE-2017-18922Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...CVE-2020-15393Fix available5.5 Medium
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturnCVE-2020-4067Fix available7.0 High
- canonical ubuntu linux, debian linux, ubuntu linux kernel (aufs filesystem module) +2 moreaufs: improperly managed inode reference counts in the vfsub_dentry_open() methodCVE-2020-11935Fix available4.4 Medium
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...CVE-2020-15358Fix available5.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache TomcatCVE-2020-11996Public exploitFix availableEPSS 26.7%7.5 High
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in...CVE-2020-15305Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a...CVE-2020-15306Fix available5.5 Medium
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds reads in PillowCVE-2020-10177Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-11538Fix available8.1 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds reads in PillowCVE-2020-10994Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in PillowCVE-2020-10379Fix available7.8 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-10378Fix available5.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12862Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12863Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12864Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreA heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12865Fix available8.0 High
- Show moreLoading…