Ubuntu Linux
by Canonical
CVEs (4,123)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-7175 | Hig | 0.42 | 7.5 | 0.03 | Mar 7, 2019 | In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c. | ||
| CVE-2018-18497 | Med | 0.42 | 6.5 | 0.01 | Feb 28, 2019 | Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file:… | ||
| CVE-2018-18495 | Med | 0.42 | 6.5 | 0.02 | Feb 28, 2019 | WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be… | ||
| CVE-2018-18494 | Med | 0.42 | 6.5 | 0.02 | Feb 28, 2019 | A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This… | ||
| CVE-2018-12402 | Med | 0.42 | 6.5 | 0.01 | Feb 28, 2019 | The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Save Page As..." functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by… | ||
| CVE-2018-12398 | Med | 0.42 | 6.5 | 0.02 | Feb 28, 2019 | By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63. | ||
| CVE-2018-12396 | Med | 0.42 | 6.5 | 0.02 | Feb 28, 2019 | A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR <… | ||
| CVE-2019-6975 | Hig | 0.42 | 7.5 | 0.05 | Feb 11, 2019 | Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function. | ||
| CVE-2019-7398 | Hig | 0.42 | 7.5 | 0.04 | Feb 5, 2019 | In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. | ||
| CVE-2019-7397 | Hig | 0.42 | 7.5 | 0.04 | Feb 5, 2019 | In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. | ||
| CVE-2019-7396 | Hig | 0.42 | 7.5 | 0.04 | Feb 5, 2019 | In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. | ||
| CVE-2019-7395 | Hig | 0.42 | 7.5 | 0.04 | Feb 5, 2019 | In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. | ||
| CVE-2018-16846 | Med | 0.42 | 6.5 | 0.02 | Jan 15, 2019 | It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices. | ||
| CVE-2018-20662 | Med | 0.42 | 6.5 | 0.02 | Jan 3, 2019 | In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during… | ||
| CVE-2018-20650 | Med | 0.42 | 6.5 | 0.03 | Jan 1, 2019 | A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach. | ||
| CVE-2018-20551 | Med | 0.42 | 6.5 | 0.02 | Dec 28, 2018 | A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c. | ||
| CVE-2018-20544 | Med | 0.42 | 6.5 | 0.02 | Dec 28, 2018 | There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19. | ||
| CVE-2018-20024 | Hig | 0.42 | 7.5 | 0.03 | Dec 19, 2018 | LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS. | ||
| CVE-2018-20023 | Hig | 0.42 | 7.5 | 0.03 | Dec 19, 2018 | LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used… | ||
| CVE-2018-20022 | Hig | 0.42 | 7.5 | 0.03 | Dec 19, 2018 | LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it… |
- risk 0.42cvss 7.5epss 0.03
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
- risk 0.42cvss 6.5epss 0.01
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file:…
- risk 0.42cvss 6.5epss 0.02
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be…
- risk 0.42cvss 6.5epss 0.02
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This…
- risk 0.42cvss 6.5epss 0.01
The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Save Page As..." functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by…
- risk 0.42cvss 6.5epss 0.02
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63.
- risk 0.42cvss 6.5epss 0.02
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR <…
- risk 0.42cvss 7.5epss 0.05
Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
- risk 0.42cvss 7.5epss 0.04
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
- risk 0.42cvss 7.5epss 0.04
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
- risk 0.42cvss 7.5epss 0.04
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
- risk 0.42cvss 7.5epss 0.04
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
- risk 0.42cvss 6.5epss 0.02
It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
- risk 0.42cvss 6.5epss 0.02
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during…
- risk 0.42cvss 6.5epss 0.03
A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
- risk 0.42cvss 6.5epss 0.02
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
- risk 0.42cvss 6.5epss 0.02
There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
- risk 0.42cvss 7.5epss 0.03
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
- risk 0.42cvss 7.5epss 0.03
LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used…
- risk 0.42cvss 7.5epss 0.03
LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it…
Page 73 of 207