15.04 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2016-2191	119	DoS Overflow	2016-04-13	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.
2	CVE-2016-1947	19		2016-01-31	2018-10-30	4.3	None	Remote	Medium	Not required	None	Partial	None
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
3	CVE-2016-1572	269	+Priv	2016-01-22	2022-03-23	4.6	None	Local	Low	Not required	Partial	Partial	Partial
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
4	CVE-2016-0755	287		2016-01-29	2018-10-17	5.0	None	Remote	Low	Not required	None	Partial	None
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
5	CVE-2016-0661			2016-04-21	2019-04-22	3.5	None	Remote	Medium	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options.
6	CVE-2016-0616			2016-01-21	2019-12-27	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
7	CVE-2016-0611	284		2016-01-21	2019-05-01	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
8	CVE-2016-0610			2016-01-21	2019-04-22	3.5	None	Remote	Medium	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
9	CVE-2016-0609			2016-01-21	2019-12-27	1.7	None	Remote	High	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.
10	CVE-2016-0608			2016-01-21	2019-12-27	3.5	None	Remote	Medium	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.
11	CVE-2016-0607			2016-01-21	2019-04-22	2.8	None	Remote	Medium	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication.
12	CVE-2016-0606			2016-01-21	2019-12-27	3.5	None	Remote	Medium	???	None	Partial	None
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.
13	CVE-2016-0600			2016-01-21	2019-12-27	3.5	None	Remote	Medium	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
14	CVE-2016-0598			2016-01-21	2019-12-27	3.5	None	Remote	Medium	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
15	CVE-2016-0597			2016-01-21	2019-12-27	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
16	CVE-2016-0596			2016-01-21	2019-12-27	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
17	CVE-2016-0595			2016-01-21	2018-10-30	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.
18	CVE-2016-0546		Overflow	2016-01-21	2019-12-27	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.
19	CVE-2016-0505			2016-01-21	2019-12-27	6.8	None	Remote	Low	???	None	None	Complete
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.
20	CVE-2016-0504			2016-01-21	2018-10-30	6.8	None	Remote	Low	???	None	None	Complete
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503.
21	CVE-2016-0503			2016-01-21	2018-10-30	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.
22	CVE-2016-0494			2016-01-21	2022-05-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
23	CVE-2016-0483		Exec Code Overflow	2016-01-21	2022-05-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.
24	CVE-2016-0466			2016-01-21	2022-05-13	5.0	None	Remote	Low	Not required	None	None	Partial
Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.
25	CVE-2016-0448			2016-01-21	2022-05-13	4.0	None	Remote	Low	???	Partial	None	None
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.
26	CVE-2016-0402			2016-01-21	2022-05-13	5.0	None	Remote	Low	Not required	None	Partial	None
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
27	CVE-2015-8768	264	+Priv	2017-02-13	2017-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone.
28	CVE-2015-8607	20	Bypass	2016-01-13	2020-07-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
29	CVE-2015-8605	20	DoS	2016-01-14	2020-04-01	5.7	None	Local Network	Medium	Not required	None	None	Complete
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
30	CVE-2015-8560		Exec Code	2016-04-14	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
31	CVE-2015-8557	78	Exec Code	2016-01-08	2017-07-01	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
32	CVE-2015-8327		Exec Code	2015-12-17	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
33	CVE-2015-8317	119	Overflow +Info	2015-12-15	2017-09-14	5.0	None	Remote	Low	Not required	Partial	None	None
The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.
34	CVE-2015-8242	119	DoS Overflow +Info	2015-12-15	2019-03-08	5.8	None	Remote	Medium	Not required	Partial	None	Partial
The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
35	CVE-2015-8241	119	DoS Overflow +Info	2015-12-15	2017-09-14	6.4	None	Remote	Low	Not required	Partial	None	Partial
The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
36	CVE-2015-8126	120	DoS Overflow	2015-11-13	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
37	CVE-2015-8104	399	DoS	2015-11-16	2019-02-13	4.7	None	Local	Medium	Not required	None	None	Complete
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.
38	CVE-2015-8023	264	Bypass	2015-11-18	2018-08-13	5.0	None	Remote	Low	Not required	None	Partial	None
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
39	CVE-2015-7981	200	+Info	2015-11-24	2017-07-01	5.0	None	Remote	Low	Not required	Partial	None	None
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
40	CVE-2015-7942	119	DoS Overflow	2015-11-18	2019-03-08	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.
41	CVE-2015-7941	119	DoS Overflow	2015-11-18	2017-09-14	4.3	None	Remote	Medium	Not required	None	None	Partial
libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.
42	CVE-2015-7869	189	DoS Overflow +Priv +Info	2015-11-24	2019-02-13	6.6	None	Local	Medium	Not required	Complete	Partial	Complete
Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows.
43	CVE-2015-7747	120	DoS Exec Code Overflow	2020-02-19	2020-02-28	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.
44	CVE-2015-7697	399	DoS	2015-11-06	2019-12-16	4.3	None	Remote	Medium	Not required	None	None	Partial
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 data in a ZIP archive.
45	CVE-2015-7696	119	DoS Exec Code Overflow	2015-11-06	2019-12-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.
46	CVE-2015-7674	189	DoS Exec Code Overflow	2015-10-26	2018-10-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
47	CVE-2015-7575	19		2016-01-09	2018-10-30	4.3	None	Remote	Medium	Not required	None	Partial	None
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
48	CVE-2015-7545	20	Exec Code	2016-04-13	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
49	CVE-2015-7529	59	+Priv +Info	2017-11-06	2019-09-27	4.6	None	Local	Low	Not required	Partial	Partial	Partial
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.
50	CVE-2015-7513	369	DoS	2016-02-08	2021-12-10	4.9	None	Local	Low	Not required	None	None	Complete
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.

Total number of vulnerabilities : 232 Page : 1 (This Page)2 3 4 5