Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ubuntu software properties vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2012-5356
The apt-add-repository tool in Ubuntu Software Properties 0.75.x prior to 0.75.10.3, 0.80.x prior to 0.80.9.2, 0.81.x prior to 0.81.13.5, 0.82.x prior to 0.82.7.3, and 0.92.x prior to 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote malic...
Canonical Ubuntu Software Properties 0.75.10.1Canonical Ubuntu Software Properties 0.75.6Canonical Ubuntu Software Properties 0.75.5Canonical Ubuntu Software Properties 0.75.10Canonical Ubuntu Software Properties 0.75.9Canonical Ubuntu Software Properties 0.75.8Canonical Ubuntu Software Properties 0.75.7Canonical Ubuntu Software Properties 0.75.10.2Canonical Ubuntu Software Properties 0.75.4Canonical Ubuntu Software Properties 0.80.6Canonical Ubuntu Software Properties 0.80.5Canonical Ubuntu Software Properties 0.80.9.1Canonical Ubuntu Software Properties 0.80.9Canonical Ubuntu Software Properties 0.80.2Canonical Ubuntu Software Properties 0.80Canonical Ubuntu Software Properties 0.80.8Canonical Ubuntu Software Properties 0.80.7Canonical Ubuntu Software Properties 0.80.4Canonical Ubuntu Software Properties 0.80.3Canonical Ubuntu Software Properties 0.81.13.3Canonical Ubuntu Software Properties 0.81.13.2Canonical Ubuntu Software Properties 0.81.6
4.6
CVSSv2
CVE-2013-1061
dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 prior to 0.92.17.3, 0.92.9 prior to 0.92.9.3, and 0.82.7 prior to 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by lever...
Marc Deslauriers Software-properties 0.92.9Marc Deslauriers Software-properties 0.82.7.4Marc Deslauriers Software-properties 0.92.17.2Marc Deslauriers Software-properties 0.82.7.3Marc Deslauriers Software-properties 0.82.7.2Marc Deslauriers Software-properties 0.92.17.1Marc Deslauriers Software-properties 0.92.17Marc Deslauriers Software-properties 0.82.7.1Marc Deslauriers Software-properties 0.82.7Marc Deslauriers Software-properties 0.92.9.2Marc Deslauriers Software-properties 0.92.9.1Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.04
4.3
CVSSv2
CVE-2011-4407
ppa.py in Software Properties prior to 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) malicious users to spoof GPG keys for a package repository.
Canonical Ubuntu Linux 11.04Canonical Software-propertiesCanonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.10
4.3
CVSSv2
CVE-2012-4208
The XrayWrapper implementation in Mozilla Firefox prior to 17.0, Thunderbird prior to 17.0, and SeaMonkey prior to 2.14 does not consider the compartment during property filtering, which allows remote malicious users to bypass intended chrome-only restrictions on reading DOM obje...
Mozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdOpensuse Opensuse 11.4Opensuse Opensuse 12.1Opensuse Opensuse 12.2Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10
7.5
CVSSv2
CVE-2012-5836
Mozilla Firefox prior to 17.0, Thunderbird prior to 17.0, and SeaMonkey prior to 2.14 allow remote malicious users to execute arbitrary code or cause a denial of service (application crash) via vectors involving the setting of Cascading Style Sheets (CSS) properties in conjunctio...
Mozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdOpensuse Opensuse 11.4Opensuse Opensuse 12.1Opensuse Opensuse 12.2Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10
6.8
CVSSv2
CVE-2012-4193
Mozilla Firefox prior to 16.0.1, Firefox ESR 10.x prior to 10.0.9, Thunderbird prior to 16.0.1, Thunderbird ESR 10.x prior to 10.0.9, and SeaMonkey prior to 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote m...
Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdMozilla Thunderbird EsrSuse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Eus 6.3Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Workstation 6.0
9.3
CVSSv2
CVE-2008-5021
nsFrameManager in Firefox 3.x prior to 3.0.4, Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a fi...
Mozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdDebian Debian Linux 4.0Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10Fedoraproject Fedora 9Fedoraproject Fedora 8Opensuse Opensuse 10.2Suse Linux Enterprise Server 9Novell Linux Desktop 9Opensuse Opensuse 11.0Opensuse Opensuse 10.3Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Debuginfo 10Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 10Novell Open Enterprise Server -
10
CVSSv2
CVE-2008-5014
jslock.cpp in Mozilla Firefox 3.x prior to 3.0.2, Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__p...
Mozilla SeamonkeyMozilla FirefoxMozilla ThunderbirdDebian Debian Linux 4.0Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.10
10
CVSSv2
CVE-2008-5017
Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x prior to 3.0.4, Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 allows remote malicious users to cause a denial of service (crash) via unknow...
Mozilla FirefoxMozilla ThunderbirdMozilla SeamonkeyDebian Debian Linux 4.0Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 6.06
7.5
CVSSv2
CVE-2008-5022
The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x prior to 3.0.4, Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13 allows remote malicious users to bypass the same-origin policy and execute arbitrary script via mul...
Mozilla FirefoxMozilla ThunderbirdMozilla SeamonkeyDebian Debian Linux 4.0Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 8.04
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook