Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Ubuntu Linux
HIGH 7.8
In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. T…
Ubuntu Linux
HIGH 7.5
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when …
Ubuntu Linux
HIGH 7.8
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would al…
Snapd
HIGH 7.5
snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, tha…
Snapd
HIGH 7.5
snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the…
Ubuntu Linux
MEDIUM 6.5
WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" co…
Ubuntu Linux
HIGH 8.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Diffi…
Snapd
CRITICAL 9.8
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This iss…
Snapd
HIGH 7.5
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 6…
Ubuntu Linux
MEDIUM 5.5
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle err…
Ubuntu Download Manager
CRITICAL 9.8
UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functiona…
Apparmor
CRITICAL 9.8
In all versions of AppArmor mount rules are accidentally widened when compiled.
Ubuntu Linux
MEDIUM 6.1
Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbit…
Metal As A Service
CRITICAL 9.8
The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu M…
Ubuntu Linux
HIGH 7.8
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Ap…
Metal As A Service
HIGH 7.5
A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ub…
Juju
HIGH 7.5
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.
Metal As A Service
MEDIUM 6.1
A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue …
Selinux
MEDIUM 5.9
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have sym…
Metal As A Service
MEDIUM 5.3
A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior…
Ubuntu Linux
HIGH 7.5
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via t…
Ubuntu Linux
HIGH 7.8
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could us…
Ubuntu Linux
MEDIUM 5.5
A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead…
Ubuntu Linux
HIGH 7.5
The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing cla…
Ubuntu Linux
CRITICAL 9.8
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving …
Ubuntu Linux
MEDIUM 6.5
A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader e…
Ubuntu Linux
CRITICAL 9.8
BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name…
Ubuntu Linux
HIGH 7.5
A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create mu…
Ubuntu Linux
MEDIUM 6.8
It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a val…
Ubuntu Linux
MEDIUM 6.5
ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.