← Back

Canonical

canonical

4,252 CVEs • 60 products

Products (60)

Click to collapse
Toggle
Ubuntu Linux
ubuntu_linux
4,121 CVEs
Lxd
lxd
35 CVEs
Juju
juju
19 CVEs
Apport
apport
17 CVEs
Snapd
snapd
16 CVEs
Cloud Init
cloud-init
9 CVEs
Metal As A Service
metal_as_a_service
5 CVEs
Multipass
multipass
5 CVEs
Accountsservice
accountsservice
4 CVEs
Ubuntu Core
ubuntu_core
4 CVEs
Ubuntu Touch
ubuntu_touch
4 CVEs
Maas
maas
3 CVEs
Subiquity
subiquity
3 CVEs
Landscape
landscape
3 CVEs
Authd
authd
3 CVEs
Update Manager
update-manager
2 CVEs
Software Properties
software-properties
2 CVEs
Acpi Support
acpi-support
2 CVEs
Ubuntu
ubuntu
2 CVEs
Lxcfs
lxcfs
2 CVEs
Unity Firefox Extension
unity-firefox-extension
2 CVEs
Ubuntu Desktop Provision
ubuntu_desktop_provision
2 CVEs
Spread
spread
1 CVE
Php5
php5
1 CVE
Ubuntu Software Properties
ubuntu_software_properties
1 CVE
Telepathy Idle
telepathy-idle
1 CVE
Apt Xapian Index
apt-xapian-index
1 CVE
Libpam Modules
libpam-modules
1 CVE
Ltsp Display Manager
ltsp_display_manager
1 CVE
Reportbug
reportbug
1 CVE
Ubuntu Core Launcher
ubuntu-core-launcher
1 CVE
Openstack Ironic
openstack_ironic
1 CVE
Ubuntu Image
ubuntu-image
1 CVE
Bazaar
bazaar
1 CVE
Screen Resolution Extra
screen-resolution-extra
1 CVE
Selinux
selinux
1 CVE
Ubuntu Download Manager
ubuntu_download_manager
1 CVE
Apparmor
apparmor
1 CVE
Ubuntu Cobbler
ubuntu_cobbler
1 CVE
Microk8s
microk8s
1 CVE
C Kernel
c-kernel
1 CVE
Trust Store (ubuntu)
trust-store_(ubuntu)
1 CVE
Trust Store (ubuntu Rtm)
trust-store_(ubuntu_rtm)
1 CVE
Whoopsie
whoopsie
1 CVE
Checkinstall
checkinstall
1 CVE
Ppp
ppp
1 CVE
Add Apt Repository
add-apt-repository
1 CVE
Ubuntu Ui Toolkit
ubuntu-ui-toolkit
1 CVE
Snapcraft
snapcraft
1 CVE
Remote Login Service
remote-login-service
1 CVE
Ubuntu Pipewire Pulse
ubuntu_pipewire-pulse
1 CVE
Pebble
pebble
1 CVE
Netplan
netplan
1 CVE
Ubuntu Advantage Desktop Daemon
ubuntu_advantage_desktop_daemon
1 CVE
Anbox Cloud
anbox_cloud
1 CVE
Linux Bluefield
linux-bluefield
1 CVE
Juju/utils
juju/utils
1 CVE
Ubuntu Subiquity
ubuntu_subiquity
1 CVE
Pdfunite
pdfunite
1 CVE
Livepatch Client
livepatch_client
1 CVE

CVEs (4,252)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-3152
1Canonical
2Ubuntu Linux
Update Manager
May 6, 2026
Apr 27, 2014
N/A· v4
N/A· v3
6.4 MEDIUM· v2
DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 thr...Show more
DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade tarball, which allows man-in-the-middle attackers to (1) create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file.Show less
CVE-2014-0474
2Canonical
Djangoproject
2Django
Ubuntu Linux
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conve...Show more
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."Show less
CVE-2014-0473
2Canonical
Djangoproject
2Django
Ubuntu Linux
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protecti...Show more
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.Show less
CVE-2014-0472
2Canonical
Djangoproject
2Django
Ubuntu Linux
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
5.1 MEDIUM· v2
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leverag...Show more
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."Show less
CVE-2011-3154
1Canonical
2Ubuntu Linux
Update Manager
May 6, 2026
Apr 17, 2014
N/A· v4
N/A· v3
1.9 LOW· v2
DistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 does not properly crea...Show more
DistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 does not properly create temporary files, which allows local users to obtain the XAUTHORITY file content for a user via a symlink attack on the temporary file.Show less
CVE-2011-4406
1Canonical
2Accountsservice
Ubuntu Linux
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
3.6 LOW· v2
The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors.
CVE-2014-2427
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
CVE-2014-2423
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab...Show more
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.Show less
CVE-2014-2421
5Canonical
DebianIbm+2 more
7Debian Linux
Forms ViewerJdk+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.Show less
CVE-2014-2414
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
CVE-2014-2413
2Canonical
Oracle
3Jdk
JreUbuntu Linux
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.
CVE-2014-2412
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.Show less
CVE-2014-2403
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
CVE-2014-2402
2Canonical
Oracle
3Jdk
JreUbuntu Linux
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vuln...Show more
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.Show less
CVE-2014-2398
4Canonical
DebianIbm+1 more
7Debian Linux
Forms ViewerJavafx+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
CVE-2014-2397
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2014-0461
4Canonical
DebianIbm+1 more
5Debian Linux
Forms ViewerJdk+2 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVE-2014-0460
4Canonical
DebianJuniper+1 more
6Debian Linux
JdkJre+3 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
CVE-2014-0459
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
Oct 14, 2026
Apr 16, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
CVE-2014-0458
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab...Show more
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.Show less