← Back

Canonical

canonical

4,252 CVEs • 60 products

Products (60)

Click to collapse
Toggle
Ubuntu Linux
ubuntu_linux
4,121 CVEs
Lxd
lxd
35 CVEs
Juju
juju
19 CVEs
Apport
apport
17 CVEs
Snapd
snapd
16 CVEs
Cloud Init
cloud-init
9 CVEs
Metal As A Service
metal_as_a_service
5 CVEs
Multipass
multipass
5 CVEs
Accountsservice
accountsservice
4 CVEs
Ubuntu Core
ubuntu_core
4 CVEs
Ubuntu Touch
ubuntu_touch
4 CVEs
Maas
maas
3 CVEs
Subiquity
subiquity
3 CVEs
Landscape
landscape
3 CVEs
Authd
authd
3 CVEs
Update Manager
update-manager
2 CVEs
Software Properties
software-properties
2 CVEs
Acpi Support
acpi-support
2 CVEs
Ubuntu
ubuntu
2 CVEs
Lxcfs
lxcfs
2 CVEs
Unity Firefox Extension
unity-firefox-extension
2 CVEs
Ubuntu Desktop Provision
ubuntu_desktop_provision
2 CVEs
Spread
spread
1 CVE
Php5
php5
1 CVE
Ubuntu Software Properties
ubuntu_software_properties
1 CVE
Telepathy Idle
telepathy-idle
1 CVE
Apt Xapian Index
apt-xapian-index
1 CVE
Libpam Modules
libpam-modules
1 CVE
Ltsp Display Manager
ltsp_display_manager
1 CVE
Reportbug
reportbug
1 CVE
Ubuntu Core Launcher
ubuntu-core-launcher
1 CVE
Openstack Ironic
openstack_ironic
1 CVE
Ubuntu Image
ubuntu-image
1 CVE
Bazaar
bazaar
1 CVE
Screen Resolution Extra
screen-resolution-extra
1 CVE
Selinux
selinux
1 CVE
Ubuntu Download Manager
ubuntu_download_manager
1 CVE
Apparmor
apparmor
1 CVE
Ubuntu Cobbler
ubuntu_cobbler
1 CVE
Microk8s
microk8s
1 CVE
C Kernel
c-kernel
1 CVE
Trust Store (ubuntu)
trust-store_(ubuntu)
1 CVE
Trust Store (ubuntu Rtm)
trust-store_(ubuntu_rtm)
1 CVE
Whoopsie
whoopsie
1 CVE
Checkinstall
checkinstall
1 CVE
Ppp
ppp
1 CVE
Add Apt Repository
add-apt-repository
1 CVE
Ubuntu Ui Toolkit
ubuntu-ui-toolkit
1 CVE
Snapcraft
snapcraft
1 CVE
Remote Login Service
remote-login-service
1 CVE
Ubuntu Pipewire Pulse
ubuntu_pipewire-pulse
1 CVE
Pebble
pebble
1 CVE
Netplan
netplan
1 CVE
Ubuntu Advantage Desktop Daemon
ubuntu_advantage_desktop_daemon
1 CVE
Anbox Cloud
anbox_cloud
1 CVE
Linux Bluefield
linux-bluefield
1 CVE
Juju/utils
juju/utils
1 CVE
Ubuntu Subiquity
ubuntu_subiquity
1 CVE
Pdfunite
pdfunite
1 CVE
Livepatch Client
livepatch_client
1 CVE

CVEs (4,252)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-0412
6Canonical
DebianNovell+3 more
8Debian Linux
Enterprise LinuxJdk+5 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
CVE-2015-0411
6Canonical
DebianFedoraproject+3 more
8Communications Policy Management
Debian LinuxEnterprise Linux+5 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.Show less
CVE-2015-0410
6Canonical
DebianNovell+3 more
9Debian Linux
Enterprise LinuxJdk+6 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affe...Show more
Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.Show less
CVE-2015-0408
6Canonical
DebianNovell+3 more
8Debian Linux
Enterprise LinuxJdk+5 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
CVE-2015-0407
5Canonical
DebianFedoraproject+2 more
6Debian Linux
Enterprise LinuxFedora+3 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
CVE-2015-0400
4Canonical
NovellOpensuse+1 more
6Jdk
JreOpensuse+3 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
CVE-2015-0395
6Canonical
DebianNovell+3 more
7Debian Linux
Enterprise LinuxJdk+4 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2015-0383
7Canonical
DebianFedoraproject+4 more
10Debian Linux
Enterprise LinuxFedora+7 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
5.4 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related...Show more
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.Show less
CVE-2015-0382
7Canonical
DebianFedoraproject+4 more
17Communications Policy Management
Debian LinuxEnterprise Linux Desktop+14 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability tha...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.Show less
CVE-2015-0381
7Canonical
DebianFedoraproject+4 more
17Communications Policy Management
Debian LinuxEnterprise Linux Desktop+14 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability tha...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382.Show less
CVE-2015-0374
7Canonical
DebianFedoraproject+4 more
16Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+13 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Forei...Show more
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key.Show less
CVE-2014-6601
6Canonical
DebianNovell+3 more
8Debian Linux
Enterprise LinuxJdk+5 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2014-6568
7Canonical
DebianFedoraproject+4 more
16Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+13 more
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.
CVE-2014-9604
2Canonical
Ffmpeg
2Ffmpeg
Ubuntu Linux
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other...Show more
libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the (1) restore_median and (2) restore_median_il functions.Show less
CVE-2015-0222
2Canonical
Djangoproject
2Django
Ubuntu Linux
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers...Show more
ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.Show less
CVE-2015-0221
2Canonical
Djangoproject
2Django
Ubuntu Linux
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption...Show more
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.Show less
CVE-2015-0220
2Canonical
Djangoproject
2Django
Ubuntu Linux
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (...Show more
The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.Show less
CVE-2014-9496
5Canonical
DebianLibsndfile Project+2 more
5Debian Linux
LibsndfileOpensuse+2 more
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
CVE-2014-9471
2Canonical
Gnu
2Coreutils
Ubuntu Linux
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" stri...Show more
The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the "--date=TZ="123"345" @1" string to the touch or date command.Show less
CVE-2014-1949
3Canonical
GnomeLinuxmint
3Gtk
Linux MintUbuntu
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.