Browse CVEs

MEDIUM 5.0 CVE-2011-4539EPSS 15% dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote a… Ubuntu Linux Mitigation only Fix from $1,6002011-12-08 CRITICAL 9.8 CVE-2011-3544 KEVEPSS 97% Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrust… Ubuntu Linux 1.6.0+ Fix from $2,3002011-10-19 HIGH 7.8 CVE-2011-2748EPSS 39% The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial o… Ubuntu Linux Patch available Fix from $1,9502011-08-15 MEDIUM 6.5 CVE-2011-0730 Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed… Ubuntu Linux 2.0.2 / 2.0.3+ Fix from $1,6002011-06-02 HIGH 7.5 CVE-2010-3069EPSS 11% Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of s… Ubuntu Linux 3.4.9 / 3.5.5+ Fix from $1,9502010-09-15 MEDIUM 6.8 CVE-2010-1781 Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a… Ubuntu Linux 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1812 Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to e… Ubuntu Linux 1.2.6 / 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1814 WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a… Ubuntu Linux 1.2.6 / 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1815 Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to e… Ubuntu Linux 1.2.6 / 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-2806EPSS 6% Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service … Ubuntu Linux 2.4.2 / 4.1.0+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2807 FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (applicati… Ubuntu Linux 2.4.2 / 4.1.0+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2808 Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service… Ubuntu Linux 2.4.2 / 4.1.0+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2498EPSS 6% The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remo… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2499EPSS 6% Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2500 Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2519EPSS 6% Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2541 Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application c… Ubuntu Linux 2.4.2+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2805EPSS 5% The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote… Ubuntu Linux 2.4.2 / 4.1.0+ Fix from $1,6002010-08-19 MEDIUM 5.1 CVE-2010-2520EPSS 6% Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows… Ubuntu Linux 2.4.0 / 10.6.5+ Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-2067 Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a deni… Ubuntu Linux 3.9.4+ Fix from $1,6002010-06-24 HIGH 7.5 CVE-2010-2063EPSS 79% Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remot… Ubuntu Linux after 3.3.12 Fix from $1,9502010-06-17 HIGH 9.3 CVE-2010-0395EPSS 10% OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Pyth… Ubuntu Linux 3.2.1+ Fix from $1,9502010-06-10 MEDIUM 5.0 CVE-2010-1624EPSS 6% The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a de… Ubuntu Linux 2.7.0+ Fix from $1,6002010-05-14 CRITICAL 9.8 CVE-2010-0840 KEVEPSS 96% Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 … Ubuntu Linux Patch available Fix from $2,3002010-04-01 MEDIUM 5.0 CVE-2009-2797 The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from… Ubuntu Linux 3.1 / 3.1.1+ Fix from $1,6002009-09-10 MEDIUM 5.8 CVE-2009-2474 neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) fiel… Ubuntu Linux 0.28.6 / 10.6.5+ Fix from $1,6002009-08-21 HIGH 7.5 CVE-2009-0949EPSS 20% The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote … Ubuntu Linux 1.3.10 / 10.4.11+ Fix from $1,9502009-06-09 HIGH 7.5 CVE-2009-0586EPSS 6% Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugin… Ubuntu Linux 0.10.23+ Fix from $1,9502009-03-14 HIGH 7.2 CVE-2008-4539 Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local us… Ubuntu Linux 0.10.0+ Fix from $1,9502008-12-29 HIGH 9.3 CVE-2008-4063 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and a… Ubuntu Linux after 3.0.1 Fix from $1,9502008-09-24