← Back

Canonical

canonical

4,238 CVEs • 60 products

Products (60)

Click to collapse
Toggle
Ubuntu Linux
ubuntu_linux
4,120 CVEs
Lxd
lxd
22 CVEs
Juju
juju
19 CVEs
Apport
apport
17 CVEs
Snapd
snapd
16 CVEs
Cloud Init
cloud-init
9 CVEs
Metal As A Service
metal_as_a_service
5 CVEs
Multipass
multipass
5 CVEs
Accountsservice
accountsservice
4 CVEs
Ubuntu Core
ubuntu_core
4 CVEs
Ubuntu Touch
ubuntu_touch
4 CVEs
Maas
maas
3 CVEs
Subiquity
subiquity
3 CVEs
Landscape
landscape
3 CVEs
Authd
authd
3 CVEs
Update Manager
update-manager
2 CVEs
Software Properties
software-properties
2 CVEs
Acpi Support
acpi-support
2 CVEs
Ubuntu
ubuntu
2 CVEs
Lxcfs
lxcfs
2 CVEs
Unity Firefox Extension
unity-firefox-extension
2 CVEs
Ubuntu Desktop Provision
ubuntu_desktop_provision
2 CVEs
Spread
spread
1 CVE
Php5
php5
1 CVE
Ubuntu Software Properties
ubuntu_software_properties
1 CVE
Telepathy Idle
telepathy-idle
1 CVE
Apt Xapian Index
apt-xapian-index
1 CVE
Libpam Modules
libpam-modules
1 CVE
Ltsp Display Manager
ltsp_display_manager
1 CVE
Reportbug
reportbug
1 CVE
Ubuntu Core Launcher
ubuntu-core-launcher
1 CVE
Openstack Ironic
openstack_ironic
1 CVE
Ubuntu Image
ubuntu-image
1 CVE
Bazaar
bazaar
1 CVE
Screen Resolution Extra
screen-resolution-extra
1 CVE
Selinux
selinux
1 CVE
Ubuntu Download Manager
ubuntu_download_manager
1 CVE
Apparmor
apparmor
1 CVE
Ubuntu Cobbler
ubuntu_cobbler
1 CVE
Microk8s
microk8s
1 CVE
C Kernel
c-kernel
1 CVE
Trust Store (ubuntu)
trust-store_(ubuntu)
1 CVE
Trust Store (ubuntu Rtm)
trust-store_(ubuntu_rtm)
1 CVE
Whoopsie
whoopsie
1 CVE
Checkinstall
checkinstall
1 CVE
Ppp
ppp
1 CVE
Add Apt Repository
add-apt-repository
1 CVE
Ubuntu Ui Toolkit
ubuntu-ui-toolkit
1 CVE
Snapcraft
snapcraft
1 CVE
Remote Login Service
remote-login-service
1 CVE
Ubuntu Pipewire Pulse
ubuntu_pipewire-pulse
1 CVE
Pebble
pebble
1 CVE
Netplan
netplan
1 CVE
Ubuntu Advantage Desktop Daemon
ubuntu_advantage_desktop_daemon
1 CVE
Anbox Cloud
anbox_cloud
1 CVE
Linux Bluefield
linux-bluefield
1 CVE
Juju/utils
juju/utils
1 CVE
Ubuntu Subiquity
ubuntu_subiquity
1 CVE
Pdfunite
pdfunite
1 CVE
Livepatch Client
livepatch_client
1 CVE

CVEs (4,238)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5689
3Canonical
IscRedhat
8Bind
Enterprise Linux DesktopEnterprise Linux Hpc Node+5 more
Apr 29, 2026
Jan 25, 2013
N/A· v4
N/A· v3
7.1 HIGH· v2
ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (ass...Show more
ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.Show less
CVE-2012-2137
2Canonical
Linux
2Linux Kernel
Ubuntu Linux
Apr 29, 2026
Jan 22, 2013
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Sig...Show more
Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setup_routing_entry function before invoking the kvm_set_irq function.Show less
CVE-2012-5656
4Canonical
FedoraprojectInkscape+1 more
4Fedora
InkscapeOpensuse+1 more
Apr 29, 2026
Jan 18, 2013
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.
CVE-2013-0389
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2013-0386
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.
CVE-2013-0385
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
6.6 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect confidentiality and integrity via unknown vectors related to Server Replication.
CVE-2013-0384
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema.
CVE-2013-0383
4Canonical
MariadbOracle+1 more
7Enterprise Linux
Enterprise Linux DesktopEnterprise Linux Eus+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to affect availability via unknown vectors related to Server Locking.
CVE-2013-0375
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Serve...Show more
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.Show less
CVE-2013-0371
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability, related to MyISAM.
CVE-2013-0368
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVE-2013-0367
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Partition.
CVE-2012-5096
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users with Server Privileges to affect availability via unknown vectors.
CVE-2012-5060
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
CVE-2012-1705
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2012-1702
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.
CVE-2012-0578
3Canonical
MariadbOracle
3Mariadb
MysqlUbuntu Linux
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2012-0574
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors.
CVE-2012-0572
4Canonical
MariadbOracle+1 more
7Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+4 more
Apr 29, 2026
Jan 17, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVE-2013-0771
4Canonical
MozillaOpensuse+1 more
9Firefox
Linux Enterprise DesktopLinux Enterprise Server+6 more
Apr 29, 2026
Jan 13, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonk...Show more
Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.Show less