Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Ubuntu Linux
CRITICAL 9.1
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
Ubuntu Linux
MEDIUM 6.5
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attac…
Ubuntu Linux
MEDIUM 6.5
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow lead…
Ubuntu Linux
CRITICAL 9.1
Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass cli…
Ubuntu Linux
CRITICAL 9.8
libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properl…
Ubuntu Linux
HIGH 7.5
Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP addres…
Ubuntu Linux
CRITICAL 9.8
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string…
Ubuntu Linux
MEDIUM 6.5
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional …
Ubuntu Linux
HIGH 7.5
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional …
Ubuntu Linux
MEDIUM 6.3
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3…
Ubuntu Linux
MEDIUM 6.5
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
Ubuntu Linux
MEDIUM 6.5
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
Ubuntu Linux
MEDIUM 6.5
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
Ubuntu Linux
MEDIUM 6.5
In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately …
Ubuntu Linux
MEDIUM 6.5
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database…
Ubuntu Linux
MEDIUM 6.1
SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.
Ubuntu Linux
MEDIUM 6.1
SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character.
Ubuntu Linux
HIGH 7.5
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
Ubuntu Linux
HIGH 7.5
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
Ubuntu Linux
HIGH 7.5
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
Ubuntu Linux
HIGH 7.5
Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.
Ubuntu Linux
CRITICAL 9.8
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
Ubuntu Linux
CRITICAL 9.8
Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
Ubuntu Linux
HIGH 7.5
Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.
Ubuntu Linux
HIGH 7.5
Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
Ubuntu Linux
HIGH 7.8
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document…
Ubuntu Linux
CRITICAL 9.1
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set i…
Ubuntu Linux
CRITICAL 9.8
Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
Ubuntu Linux
MEDIUM 6.5
In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height f…
Ubuntu Linux
CRITICAL 9.8
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Pro…