canonical ubuntu linux 14.04 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

Unspecified vulnerability in Oracle MySQL 5.6.30 and previous versions and 5.7.12 and previous versions allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

Oracle Mysql Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04

6.5

CVSSv3

Poppler prior to 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

Freedesktop Poppler Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10

NA

ClamAV prior to 0.98.7 allows remote malicious users to cause a denial of service (infinite loop) via a crafted xz archive file.

Clamav Clamav Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.1

NA

Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption.

Qemu Qemu Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 10.04

NA

The slapper function in chkrootkit prior to 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.

Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 13.10 Chkrootkit Chkrootkit

2 EDB exploits

4.7

CVSSv3

w3m up to and including 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local malicious user to craft a symlink attack to overwrite arbitrary files.

Tats W3m Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 17.10

6.5

CVSSv3

WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted...

Mozilla Firefox Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10

1 Github repository

6.5

CVSSv3

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: l...

Mozilla Firefox Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.10

8.8

CVSSv3

When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.

Mozilla Firefox Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04

9.8

CVSSv3

A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affect...

Mozilla Firefox Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook