Ecosystem
Ubuntu
61,415 known vulnerabilities.
Most affected packages
linux-raspi2 20,480
linux-hwe 20,441
linux-azure 20,410
linux-riscv 20,406
linux-gcp 20,381
linux-gke 20,174
linux-hwe-edge 20,116
linux-oem 20,065
linux-azure-fde 19,892
linux-realtime 19,861
linux-raspi-realtime 19,859
linux-intel-iot-realtime 19,853
linux-azure-edge 19,850
linux-gke-4.15 19,848
linux-aws-5.0 19,788
linux-oracle-5.0 19,785
linux-gcp-5.3 19,755
linux-azure-5.3 19,745
linux-oracle-5.3 19,675
linux-aws-5.3 19,669
linux-oem-5.6 19,571
linux-hwe-5.8 19,515
linux-riscv-5.8 19,511
linux-oem-5.10 19,457
linux-aws-5.8 19,449
linux-gcp-5.8 19,448
linux-oracle-5.8 19,448
linux-gke-5.4 19,436
linux-gkeop-5.4 19,436
linux-azure-5.8 19,436
linux-hwe-5.11 19,408
linux-azure-5.11 19,387
linux-gcp-5.11 19,387
linux-oracle-5.11 19,387
linux-aws-5.11 19,386
linux-riscv-5.11 19,381
linux-intel-5.13 19,360
linux-oem-5.13 19,346
linux-hwe-5.13 19,319
linux-azure-5.13 19,301
2,752 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or exec…
-
Unscored —
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…
-
Unscored —
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-s…
-
Unscored —
Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, wh…
-
Unscored —CVE-2017-14939 Public exploit
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
-
Unscored —CVE-2015-1336 Public exploit
The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access …
-
Unscored —CVE-2015-3643 Public exploit
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ub…
-
Medium 6.1CVE-2017-14735 Public exploit
OWASP AntiSamy Cross-site Scripting vulnerability
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.
-
Unscored —
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchiv…
-
Unscored —
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a use…
-
Unscored —CVE-2017-14489 Public exploit
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users t…
-
Unscored —CVE-2017-1000250 Public exploit
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability whic…
-
Unscored —
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and inclu…
-
Unscored —CVE-2017-9779 Public exploit
OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but w…
-
Unscored —
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to …
-
Unscored —CVE-2017-13672 Public exploit
QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to …
-
High 7.5
RubyGems may allow a maliciously crafted gem to overwrite files
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.
-
Unscored —CVE-2016-10504 Public exploit
Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remot…
-
Unscored —CVE-2017-12865 Public exploit
Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of se…
-
Unscored —CVE-2017-12954 Public exploit
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of…
-
Unscored —CVE-2017-12952 Public exploit
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer …
-
Unscored —CVE-2017-12950 Public exploit
The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL …
-
Unscored —CVE-2017-12953 Public exploit
The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial…
-
Unscored —CVE-2017-12951 Public exploit
The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a de…
-
Unscored —CVE-2015-1325 Public exploit
Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in U…
-
High 8.8
Incorrect Default Permissions in Supervisor
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.
-
Unscored —
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a deni…
-
Unscored —CVE-2017-11662 Public exploit
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appl…
-
Unscored —CVE-2017-11664 Public exploit
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —CVE-2017-11663 Public exploit
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
High 7.5CVE-2017-12852 Public exploit
Numpy missing input validation
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
-
Unscored —CVE-2017-12426 Public exploit
GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.…
-
Unscored —
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF fi…
-
Unscored —
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause…
-
Unscored —
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authe…
-
Unscored —
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparam…
-
Unscored —CVE-2017-7533 Public exploit
Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges …
-
Unscored —CVE-2017-11552 Public exploit
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers t…
-
Unscored —CVE-2017-11548 Public exploit
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servi…