6.10 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2008-1195	254			2008-03-06	2019-07-31	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.
2	CVE-2008-0226	119		Exec Code Overflow	2008-01-10	2019-12-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
3	CVE-2007-6427	787		Exec Code	2008-01-18	2020-11-20	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
4	CVE-2007-6206	200		+Info	2007-12-04	2020-08-12	2.1	None	Local	Low	Not required	Partial	None	None
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
5	CVE-2007-5268			DoS	2007-10-08	2018-10-26	4.3	None	Remote	Medium	Not required	None	None	Partial
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
6	CVE-2007-5191	252		+Priv	2007-10-04	2020-11-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
7	CVE-2007-5023	264		+Priv	2007-09-21	2019-08-01	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain privileges via unspecified vectors, possibly involving a malicious "program.exe" file in the C: folder.
8	CVE-2007-4772	399		DoS	2008-01-09	2019-10-09	4.0	None	Remote	Low	???	None	None	Partial
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.
9	CVE-2007-4657	119		DoS Overflow +Info	2007-09-04	2018-10-26	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory contents) or cause a denial of service (thread crash) via a large len value to the (1) strspn or (2) strcspn function, which triggers an out-of-bounds read. NOTE: this affects different product versions than CVE-2007-3996.
10	CVE-2007-4497	264		DoS	2007-09-21	2019-08-01	5.5	None	Local Network	Low	???	None	None	Complete
Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows users with login access to a guest operating system to cause a denial of service (guest outage and host process crash or hang) via unspecified vectors.
11	CVE-2007-4496	399		Exec Code	2007-09-21	2019-08-01	6.5	None	Local Network	High	???	Complete	Complete	Complete
Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors.
12	CVE-2007-3998	20		DoS	2007-09-04	2018-10-26	5.0	None	Remote	Low	Not required	None	None	Partial
The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, ""' argument set.
13	CVE-2007-3387	190		Exec Code Overflow	2007-07-30	2020-12-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
14	CVE-2007-2949	190		Exec Code Overflow	2007-07-04	2022-02-07	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
15	CVE-2007-2875	189			2007-06-11	2018-10-19	2.1	None	Local	Low	Not required	Partial	None	None
Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.
16	CVE-2007-2834	190		Exec Code Overflow	2007-09-18	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
17	CVE-2007-2798	787		Exec Code Overflow	2007-06-26	2021-02-02	9.0	None	Remote	Low	???	Complete	Complete	Complete
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
18	CVE-2007-2728				2007-05-16	2021-03-31	5.0	None	Remote	Low	Not required	Partial	None	None
The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727.
19	CVE-2007-2691				2007-05-16	2018-10-19	4.9	None	Remote	Medium	???	None	Partial	Partial
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
20	CVE-2007-2583		1	DoS	2007-05-10	2021-11-08	4.0	None	Remote	Low	???	None	None	Partial
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
21	CVE-2007-2443			Exec Code	2007-06-26	2021-02-02	8.3	None	Local Network	Low	Not required	Complete	Complete	Complete
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
22	CVE-2007-2442			Exec Code	2007-06-26	2021-02-02	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
23	CVE-2007-2172	20			2007-04-22	2018-10-19	4.7	None	Local	Medium	Not required	None	None	Complete
A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.
24	CVE-2007-2138	264		+Priv	2007-04-24	2018-10-19	6.0	None	Remote	Medium	???	Partial	Partial	Partial
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
25	CVE-2007-1887	120		Exec Code Overflow	2007-04-06	2022-07-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with a 0x01 character.
26	CVE-2007-1864	119		Overflow	2007-05-09	2019-05-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
27	CVE-2007-1562	200		+Info	2007-03-21	2020-12-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
28	CVE-2007-1349	20		DoS	2007-03-30	2022-02-03	5.0	None	Remote	Low	Not required	None	None	Partial
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.
29	CVE-2007-1216	415		Exec Code	2007-04-06	2021-02-02	9.0	None	Remote	Low	???	Complete	Complete	Complete
Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".
30	CVE-2007-0988	119		DoS Overflow	2007-02-20	2019-10-09	4.3	None	Remote	Medium	Not required	None	None	Partial
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
31	CVE-2007-0957	787		Exec Code Overflow	2007-04-06	2021-02-02	9.0	None	Remote	Low	???	Complete	Complete	Complete
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
32	CVE-2007-0956	306		Bypass	2007-04-06	2021-02-02	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
33	CVE-2007-0908	20			2007-02-13	2018-10-30	5.0	None	Remote	Low	Not required	Partial	None	None
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.
34	CVE-2007-0780	79		XSS	2007-02-26	2019-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.
35	CVE-2007-0778	200		+Info	2007-02-26	2019-10-09	5.4	None	Remote	High	Not required	Complete	None	None
The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.
36	CVE-2007-0777	119		DoS Exec Code Overflow Mem. Corr.	2007-02-26	2019-10-09	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.
37	CVE-2007-0455	120		DoS Exec Code Overflow	2007-01-30	2022-07-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
38	CVE-2007-0063	191		Exec Code Overflow	2007-09-21	2019-07-16	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
39	CVE-2007-0061	119		Exec Code Overflow	2007-09-21	2019-07-16	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."
40	CVE-2007-0009	119		Exec Code Overflow	2007-02-26	2019-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.
41	CVE-2006-7232	89		DoS Sql	2006-12-31	2018-10-17	3.5	None	Remote	Medium	???	None	None	Partial
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.
42	CVE-2006-6504	94		Exec Code Mem. Corr.	2006-12-20	2018-10-17	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
43	CVE-2006-6503	254		XSS Bypass	2006-12-20	2018-10-17	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.
44	CVE-2006-6501	264		+Priv	2006-12-20	2018-10-17	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.
45	CVE-2006-6500	119		DoS Exec Code Overflow	2006-12-20	2019-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.
46	CVE-2006-6499			DoS	2006-12-20	2019-10-09	4.3	None	Remote	Medium	Not required	None	None	Partial
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.
47	CVE-2006-5173			DoS	2006-10-17	2020-08-19	2.1	None	Local	Low	Not required	None	None	Partial
Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access.

Total number of vulnerabilities : 47 Page : 1 (This Page)