Skip to contentCanonical vulnerabilities
Newest
- wordpress, canonical ubuntu linux, debian linux +2 moreis_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file...CVE-2020-28039Fix available9.1 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14837Fix available4.9 Medium
- containerd, canonical ubuntu linux, debian linux +2 morecontainerd can be coerced into leaking credentials during image pullCVE-2020-15157Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve...CVE-2020-25645Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreUnprivileged overlay + shiftfs read accessCVE-2020-16120Fix available5.1 Medium
- canonical linux kernel, ubuntu linux, debian linux +1 more +3 moreDCCP CCID structure use-after-freeCVE-2020-16119Fix available6.3 Medium
- red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 moreMultiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the...CVE-2020-14355Fix available6.6 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- python urllib3, canonical ubuntu linux, debian linux +2 more +4 moreCRLF injection in urllib3CVE-2020-26137Fix available6.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreAn integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`...CVE-2020-14378Fix available3.3 Low
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of...CVE-2020-14377Fix available7.1 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds...CVE-2020-14376Fix available7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors,...CVE-2020-14375Fix available7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking...CVE-2020-14374Fix available8.8 High
- python, canonical ubuntu linux, debian linux +8 more +10 morehttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...CVE-2020-26116Fix available7.2 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A...CVE-2020-25641Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel...CVE-2020-26088Fix available5.5 Medium
- packagekit, canonical ubuntu linux +1 morePackageKit error messages leak presence and mimetype of files to unprivileged usersCVE-2020-16121Fix available3.3 Low
- aptdaemon project aptdaemonaptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale propertyCVE-2020-15703Fix available4.0 Medium
- gon project gon, canonical ubuntu linux, debian linux +2 moreGon gem lack of escaping certain input when outputting as JSONCVE-2020-25739Fix available6.1 Medium
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...CVE-2019-20919Fix available4.7 Medium
- canonical pulseaudioPotential double-free in pulseaudioCVE-2020-15710Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata...CVE-2020-14385Fix available5.5 Medium
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8...CVE-2020-25285Fix available6.4 Medium
- perl dbi, canonical ubuntu linux +1 moreAn issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods...CVE-2013-7490Fix available5.3 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- canonical ubuntu-ui-toolkitInsecure temp file usage in Ubuntu UI toolkitCVE-2014-14203.8 Low
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- yaws, canonical ubuntu linux, debian linux +2 moreCGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.CVE-2020-24916Fix availableEPSS 17.4%9.8 Critical
- yaws, canonical ubuntu linux, debian linux +2 moreWebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.CVE-2020-24379Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local...CVE-2020-25212Fix available7.0 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreRaccoon attackCVE-2020-1968Fix available3.7 Low
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...CVE-2020-24659Fix available7.5 High
- gruntjs grunt, canonical ubuntu linux, debian linux +2 moreArbitrary Code ExecutionCVE-2020-7729Fix available7.1 High
- cryptsetup project cryptsetup, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2...CVE-2020-14382Fix available7.8 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24584Fix available7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24583Fix available7.5 High
- canonical checkinstallcheckinstall 1.6.2, when used to create a package that contains a symlink, may trigger the...CVE-2020-250317.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4...CVE-2020-14314Fix available5.5 Medium
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the...CVE-2020-24654Fix available3.3 Low
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...CVE-2020-14362Fix available7.8 High
- the xorg project xorg-x11-server, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to...CVE-2020-14361Fix available7.8 High
- the xorg project xorg-x11-server, x.org x server, canonical ubuntu linux +1 more +3 moreA flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension...CVE-2020-14346Fix available7.8 High
- the xorg project xorg-x11-server, canonical ubuntu linux, x.org x server +2 moreA flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in...CVE-2020-14345Fix available7.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2020-24606Fix available8.6 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...CVE-2020-14364Public exploitFix available5.0 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15811Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15810Fix available6.5 Medium
- Show moreLoading…