← Back

Canonical

canonical

4,252 CVEs • 60 products

Products (60)

Click to collapse
Toggle
Lxd
lxd
Juju
juju
Apport
apport
Snapd
snapd
Cloud Init
cloud-init
Multipass
multipass
Ubuntu Core
ubuntu_core
Ubuntu Touch
ubuntu_touch
Maas
maas
Subiquity
subiquity
Landscape
landscape
Authd
authd
Acpi Support
acpi-support
Ubuntu
ubuntu
Lxcfs
lxcfs
Spread
spread
Php5
php5
Telepathy Idle
telepathy-idle
Libpam Modules
libpam-modules
Reportbug
reportbug
Ubuntu Image
ubuntu-image
Bazaar
bazaar
Selinux
selinux
Apparmor
apparmor
Ubuntu Cobbler
ubuntu_cobbler
Microk8s
microk8s
C Kernel
c-kernel
Whoopsie
whoopsie
Checkinstall
checkinstall
Ppp
ppp
Snapcraft
snapcraft
Pebble
pebble
Netplan
netplan
Anbox Cloud
anbox_cloud
Juju/utils
juju/utils
Pdfunite
pdfunite

CVEs (4,252)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-49...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
2.8 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
8Canonical
DebianFedoraproject+5 more
17Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+14 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
7Canonical
DebianFedoraproject+4 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+11 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
6Canonical
DebianFedoraproject+3 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+11 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.
6Canonical
DebianFedoraproject+3 more
13Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+10 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.Show less
7Canonical
DebianFedoraproject+4 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+12 more
May 6, 2026
Oct 21, 2015
N/A· v4
N/A· v3
1.7 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerabi...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.Show less
3Canonical
DebianLinux
3Debian Linux
Linux KernelUbuntu Linux
May 6, 2026
Oct 19, 2015
N/A· v4
N/A· v3
4.9 MEDIUM· v2
The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impa...Show more
The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.Show less
4Canonical
DebianLinux+1 more
5Debian Linux
Linux KernelSuse Linux Enterprise Desktop+2 more
May 6, 2026
Oct 19, 2015
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large io...Show more
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.Show less
2Canonical
Simpestreams Project
2Simplestreams
Ubuntu Linux
May 6, 2026
Oct 9, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response...Show more
Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response.Show less
4Canonical
DebianOracle+1 more
4Debian Linux
RpcbindSolaris+1 more
May 6, 2026
Oct 1, 2015
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.
2Apport Project
Canonical
2Apport
Ubuntu Linux
May 6, 2026
Oct 1, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.
2Canonical
Linuxcontainers
2Lxc
Ubuntu Linux
May 6, 2026
Oct 1, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
4Canonical
DebianGnu+1 more
6Debian Linux
GlibcLinux Enterprise Debuginfo+3 more
May 6, 2026
Sep 28, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrar...Show more
Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.Show less
1Canonical
1Ubuntu Linux
May 6, 2026
Sep 17, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount...Show more
The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive.Show less
4Canonical
DebianFreetype+1 more
4Debian Linux
FreetypeOpensuse+1 more
May 6, 2026
Sep 14, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#gar...Show more
The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.Show less
2Canonical
Libvdpau Project
2Libvdpau
Ubuntu Linux
May 6, 2026
Sep 8, 2015
N/A· v4
N/A· v3
6.3 MEDIUM· v2
The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors.
2Canonical
Libvdpau Project
2Libvdpau
Ubuntu Linux
May 6, 2026
Sep 8, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.