Ecosystem
Ubuntu
61,418 known vulnerabilities.
Most affected packages
linux-raspi2 20,483
linux-hwe 20,444
linux-azure 20,413
linux-riscv 20,409
linux-gcp 20,384
linux-gke 20,177
linux-hwe-edge 20,119
linux-oem 20,068
linux-azure-fde 19,895
linux-realtime 19,864
linux-raspi-realtime 19,862
linux-intel-iot-realtime 19,856
linux-azure-edge 19,853
linux-gke-4.15 19,851
linux-aws-5.0 19,791
linux-oracle-5.0 19,788
linux-gcp-5.3 19,758
linux-azure-5.3 19,748
linux-oracle-5.3 19,678
linux-aws-5.3 19,672
linux-oem-5.6 19,574
linux-hwe-5.8 19,518
linux-riscv-5.8 19,514
linux-oem-5.10 19,460
linux-aws-5.8 19,452
linux-gcp-5.8 19,451
linux-oracle-5.8 19,451
linux-gke-5.4 19,439
linux-gkeop-5.4 19,439
linux-azure-5.8 19,439
linux-hwe-5.11 19,411
linux-azure-5.11 19,390
linux-gcp-5.11 19,390
linux-oracle-5.11 19,390
linux-aws-5.11 19,389
linux-riscv-5.11 19,384
linux-intel-5.13 19,363
linux-oem-5.13 19,349
linux-hwe-5.13 19,322
linux-azure-5.13 19,304
2,752 results · Clear filters · Feed
-
Unscored —
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files v…
-
High 8.4
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6…
KEV Sep 9, 2024 -
Medium 5.5
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct…
KEV Nov 3, 2021 -
Unscored —
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a…
-
Unscored —CVE-2016-1575 Public exploit
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which a…
-
Unscored —CVE-2016-1576 Public exploit
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which al…
-
Unscored —CVE-2016-3140 Public exploit
The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically …
-
Unscored —CVE-2016-3136 Public exploit
The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically …
-
Unscored —CVE-2016-2853 Public exploit
The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local use…
-
Unscored —CVE-2016-2188 Public exploit
The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proxima…
-
Unscored —CVE-2016-2854 Public exploit
The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local us…
-
Unscored —CVE-2015-7515 Public exploit
The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate a…
-
Unscored —CVE-2016-3135 Public exploit
Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 3…
-
Unscored —CVE-2016-3672 Public exploit
The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize …
-
Unscored —CVE-2016-3134 Public exploit
The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local u…
-
Unscored —CVE-2016-2384 Public exploit
Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows …
-
Unscored —CVE-2016-2782 Public exploit
The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attac…
-
Unscored —CVE-2016-2184 Public exploit
The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5…
-
Unscored —
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial o…
-
Unscored —CVE-2016-0846 Public exploit
libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5…
-
Unscored —CVE-2016-2417 Public exploit
media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x bef…
-
Unscored —CVE-2015-8550 Public exploit
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…
-
Unscored —
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.…
-
Unscored —
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…
-
Unscored —CVE-2015-8710 Public exploit
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a deni…
-
Unscored —
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER …
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows…
-
Unscored —CVE-2016-1531 Public exploit
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
-
Unscored —
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of ser…
-
Unscored —
Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote…
-
Medium 6.4
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users t…
-
Unscored —CVE-2016-2856 Public exploit
pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubu…
-
Unscored —
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows…
-
Unscored —
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.57…
-
Unscored —
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a…