Skip to content
OpenAdvisories

Ecosystem

Ubuntu

61,421 known vulnerabilities.

Most affected packages

linux-raspi2 20,483 linux-hwe 20,444 linux-azure 20,413 linux-riscv 20,409 linux-gcp 20,384 linux-gke 20,177 linux-hwe-edge 20,119 linux-oem 20,068 linux-azure-fde 19,895 linux-realtime 19,864 linux-raspi-realtime 19,862 linux-intel-iot-realtime 19,856 linux-azure-edge 19,853 linux-gke-4.15 19,851 linux-aws-5.0 19,791 linux-oracle-5.0 19,788 linux-gcp-5.3 19,758 linux-azure-5.3 19,748 linux-oracle-5.3 19,678 linux-aws-5.3 19,672 linux-oem-5.6 19,574 linux-hwe-5.8 19,518 linux-riscv-5.8 19,514 linux-oem-5.10 19,460 linux-aws-5.8 19,452 linux-gcp-5.8 19,451 linux-oracle-5.8 19,451 linux-gke-5.4 19,439 linux-gkeop-5.4 19,439 linux-azure-5.8 19,439 linux-hwe-5.11 19,411 linux-azure-5.11 19,390 linux-gcp-5.11 19,390 linux-oracle-5.11 19,390 linux-aws-5.11 19,389 linux-riscv-5.11 19,384 linux-intel-5.13 19,363 linux-oem-5.13 19,349 linux-hwe-5.13 19,322 linux-azure-5.13 19,304
All Critical High Medium Low Exploited only Public exploit

2,752 results · Clear filters · Feed

  • Unscored —
    CVE-2015-0359 Public exploit EPSS 92%

    Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows an…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3042 Public exploit EPSS 37%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • Unscored —
    CVE-2015-1126 Public exploit

    WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2015-0816 Public exploit EPSS 65%

    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resourc…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0802 Public exploit EPSS 65%

    Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl…

    firefox Ubuntu
  • Unscored —
    CVE-2015-0273 Public exploit EPSS 43%

    Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x bef…

    php5 Ubuntu
  • Unscored —
    CVE-2015-0252 Public exploit EPSS 39%

    internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentati…

    xerces-c xerces-c Debian Ubuntu
  • Unscored —
    CVE-2015-2153 Public exploit EPSS 18%

    The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers …

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2014-7822 Public exploit

    The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restricti…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2015-0336 Public exploit EPSS 70%

    Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-0240 Public exploit EPSS 88%

    The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2015-0318 Public exploit EPSS 75%

    Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.44…

    flashplugin-nonfree Ubuntu
  • High 7.8
    CVE-2015-0313 Exploited Public exploit EPSS 95%

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • Unscored —
    CVE-2015-0231 Public exploit EPSS 44%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • High 7.8
    CVE-2015-0311 Exploited Public exploit EPSS 86%

    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • Unscored —
    CVE-2014-6593 Public exploit EPSS 66%

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-9597 Public exploit

    The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to e…

    vlc Ubuntu
  • Unscored —
    CVE-2015-1201 Public exploit

    Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecifie…

    privoxy Ubuntu
  • Unscored —
    CVE-2014-8636 Public exploit EPSS 64%

    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with…

    firefox Ubuntu
  • Unscored —
    CVE-2015-0205 Public exploit EPSS 22%

    The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client au…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0204 Public exploit EPSS 99%

    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3570 Public exploit EPSS 22%

    The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly cal…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-8275 Public exploit EPSS 15%

    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificat…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2013-2131 Public exploit EPSS 11%

    Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attacke…

    rrdtool rrdtool Debian Ubuntu
  • Unscored —
    CVE-2014-8142 Public exploit EPSS 55%

    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.…

    php5 Ubuntu
  • Unscored —
    CVE-2014-9295 Public exploit EPSS 79%

    Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2014-9258 Public exploit

    SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to exe…

    glpi Ubuntu
  • Unscored —
    CVE-2014-9322 Public exploit

    arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack …

    linux linux linux-lts-utopic Debian Ubuntu
  • Unscored —
    CVE-2014-4323 Public exploit

    The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used i…

    linux-raspi2 linux-hwe linux-riscv linux-gke Ubuntu
  • High —
    CVE-2014-7192 Public exploit EPSS 13%

    Potential for Script Injection in syntax-error

    Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

    libv8-3.14 syntax-error Ubuntu npm
  • Unscored —
    CVE-2014-9219 Public exploit

    Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allo…

    phpmyadmin phpmyadmin Debian Ubuntu
  • Unscored —
    CVE-2014-9218 Public exploit EPSS 11%

    libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows r…

    phpmyadmin phpmyadmin Debian Ubuntu
  • Unscored —
    CVE-2014-9236 Public exploit

    Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier a…

    zoph zoph Debian Ubuntu
  • Unscored —
    CVE-2014-9235 Public exploit

    Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated…

    zoph zoph Debian Ubuntu
  • Unscored —
    CVE-2014-9016 Public exploit EPSS 79%

    The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.…

    drupal7 Ubuntu
  • Medium —
    CVE-2014-3625 Public exploit

    Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

    Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.

    libspring-java libspring-java org.springframework:spring-webmvc Debian Ubuntu Maven
  • Unscored —
    CVE-2014-8768 Public exploit EPSS 20%

    Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow re…

    tcpdump tcpdump Debian Ubuntu
  • Unscored —
    CVE-2014-7910 Public exploit

    Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service …

    chromium-browser oxide-qt Ubuntu
  • Unscored —
    CVE-2014-8440 Public exploit EPSS 82%

    Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on…

    flashplugin-nonfree Ubuntu