Canonical
canonical
4,252 CVEs • 60 products
Products (60)
Click to collapseToggle
Products (60)
Click to collapse
CVEs (4,252)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
4Canonical DebianFedoraproject+1 more4Debian Linux FedoraPillow+1 moreJun 17, 2026 Jun 25, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. |
2Canonical Nvidia5Geforce Firmware Nvs FirmwareQuadro Firmware+2 moreJun 17, 2026 Jun 25, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...Show more |
3Canonical OpensuseSane Project3Leap Sane BackendsUbuntu LinuxJun 17, 2026 Jun 24, 2020 N/A· v4 5.7 MEDIUM· v3 2.7 LOW· v2 A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079. |
4Canonical DebianOpensuse+1 more4Debian Linux LeapSane Backends+1 moreJun 17, 2026 Jun 24, 2020 N/A· v4 8.0 HIGH· v3 5.2 MEDIUM· v2 A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084. |
3Canonical OpensuseSane Project3Leap Sane BackendsUbuntu LinuxJun 17, 2026 Jun 24, 2020 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-08...Show more |
4Canonical DebianOpensuse+1 more4Debian Linux LeapSane Backends+1 moreJun 17, 2026 Jun 24, 2020 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-08...Show more |
4Canonical DebianOpensuse+1 more4Debian Linux LeapSane Backends+1 moreJun 17, 2026 Jun 24, 2020 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-08...Show more |
3Canonical OpensuseSane Project3Leap Sane BackendsUbuntu LinuxJun 17, 2026 Jun 24, 2020 N/A· v4 8.8 HIGH· v3 7.9 HIGH· v2 A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080. |
3Canonical DebianGnu3Debian Linux MailmanUbuntu LinuxJun 17, 2026 Jun 24, 2020 N/A· v4 4.3 MEDIUM· v3 2.6 LOW· v2 GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2...Show more |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1...Show more |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2. |
5Canonical DebianFedoraproject+2 more5Debian Linux FedoraFreerdp+2 moreJun 17, 2026 Jun 22, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1...Show more |
6Canonical DebianFedoraproject+3 more6Debian Linux FedoraLeap+3 moreJun 17, 2026 Jun 21, 2020 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-mi...Show more |
3Canonical DebianRack Project3Debian Linux RackUbuntu LinuxJun 17, 2026 Jun 19, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix. |