Skip to contentUbuntu vulnerabilities
Newest
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before...CVE-2019-10167Fix available8.8 High
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreIt was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would...CVE-2019-10166Fix available7.8 High
- libvirt, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreIt was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients...CVE-2019-10161Fix available8.8 High
- libvirt, fedoraproject fedora +1 moreA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin...CVE-2019-10132Fix available8.8 High
- snapwebThe Snapweb interface before version 0.21.2 was exposing controls to install or remove snap...CVE-2016-15877.1 High
- ubuntu unity8Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-mostCVE-2016-15841.6 Low
- canonical ubuntu download manager, ubuntu download manager +1 moreUDM doesn't check for confinement before running post-processing commandsCVE-2016-1579Fix available6.7 Medium
- ubports unity8Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dashCVE-2016-15734.8 Medium
- ubuntu unity-scope-gdrive, canonical ubuntu linux +1 moreunity-scope-gdrive search feature logs search terms to syslogCVE-2015-13432.0 Low
- canonical lxdchmod race in doUidshiftIntoContainerCVE-2015-1340Fix available7.0 High
- ubuntu content hub, canonical ubuntu linux +1 moreContent-hub DBUS API doesn't prevent confined apps from passing paths to files without accessCVE-2015-13273.9 Low
- ubuntu maas, canonical metal as a service +1 moreProbe-and-enlist for SeaMicro chassis writes password to the logCVE-2015-13205.5 Medium
- canonical jujuJuju Joyent provider uploads user's private ssh key by defaultCVE-2015-13166.4 Medium
- ubuntu maas, canonical metal as a service +1 moreuuid.uuid1() is not suitable as an unguessable identifier/tokenCVE-2014-14282.0 Low
- ubuntu maas, canonical metal as a service +1 moreMAAS API vulnerable to CSRF attackCVE-2014-14279.6 Critical
- ubuntu maas, canonical metal as a service +1 moreget_file_by_name does not check ownerCVE-2014-14268.6 High
- redhat libvirt, fedoraproject fedora, opensuse leap +2 moreAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...CVE-2019-3886Fix available5.4 Medium
- redhat libvirt, opensuse leap +1 moreA NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets...CVE-2019-3840Fix available5.8 Medium
- redhat libvirtA NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty...CVE-2017-2635Fix available7.7 High
- base-files project base-files, canonical ubuntu linux +1 moreInsecure temporary file use in base-filesCVE-2018-6557Fix available7.0 High
- libvirt, debian linux +1 morelibvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an...CVE-2018-1064Fix available7.5 High
- dovecot, debian linux, ubuntu +2 moreA specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out...CVE-2017-14461Fix availableEPSS 16.7%5.9 Medium
- oxide project oxideA malicious webview could install long-lived unload handlers that re-use an incognito...CVE-2016-1586Fix available1.8 Low
- canonical apport, ubuntu linux +1 moreApport privilege escalation through Python module importsCVE-2015-1341Fix available7.4 High
- libav, opensuse leap, ubuntu +2 moreThe ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote...CVE-2015-5479Fix available6.5 Medium
- python-dbusmock project python-dbusmockpython-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmpCVE-2015-1326Fix available5.7 Medium
- ubuntu network-manager, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before...CVE-2015-1322Fix available4.6 Medium
- ubuntu upstart, vivid +1 moreThe logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2...CVE-2015-2285Public exploit7.2 High
- canonical ubuntu, ubuntu apparmor +1 moreapparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows...CVE-2014-1424Fix available6.4 Medium
- linux kernel, xen, ubuntu +2 moreXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to...CVE-2015-2150Fix available4.9 Medium
- ubuntu metal as a serviceCross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1...CVE-2013-10704.3 Medium
- ubuntu metal as a serviceUbuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml,...CVE-2013-10692.1 Low
- redhat jboss enterprise brms platform, jboss enterprise portal platform, jboss enterprise web server +2 more +4 moreArbitrary file write in Apache Commons FileuploadCVE-2013-2186Public exploitFix availableEPSS 12.7%7.5 High
- canonical ubuntu linux, debian linux, x.org x server +2 moreThe X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly...CVE-2011-4613Public exploitFix available4.6 Medium
- ubuntu language-selectordbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the...CVE-2011-18427.2 High
- ubuntu language-selectordbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not...CVE-2011-07297.2 High
- ubuntu edubuntu, live dvd +1 moreThe Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private...CVE-2011-07249.3 High
- ubuntu linuxThe base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on...CVE-2010-08349.3 High
- ubuntu, ubuntu 73-oubuntu +1 moreThe eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount...CVE-2009-1296Fix available1.9 Low
- ubuntu linuxThe Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9...CVE-2009-16016.8 Medium
- ubuntu linuxsystem-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in...CVE-2008-6792Fix available5.0 Medium
- branden robinson xvfb-run, debian linux, redhat fedora +2 morexvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place...CVE-2009-1573Fix available4.6 Medium
- apport, ubuntu +1 moreApport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5...CVE-2009-12951.9 Low
- ubuntu linuxGNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and ...CVE-2009-0578Fix available6.2 Medium
- ubuntu linuxnm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which...CVE-2009-0365Fix available4.6 Medium
- linux kernel, ubuntu linux kernel +1 moreMultiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote...CVE-2008-4395Fix available8.3 High
- ubuntu linuxBuffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related...CVE-2008-4306Fix available9.3 High
- ubuntu linuxThe ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys...CVE-2008-2285Fix available5.0 Medium
- ubuntu linux kernelThe skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and...CVE-2006-72297.8 High
- openbsd, debian linux, redhat enterprise linux +3 more +5 moreStack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0...CVE-2007-5365Public exploitFix availableEPSS 80.3%7.2 High
- Show moreLoading…