Vulnerabilities > Canonical > Ubuntu Linux > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-04-19 CVE-2018-2766 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).
network
low complexity
oracle canonical mariadb debian netapp
4.9
2018-04-19 CVE-2018-2762 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection).
local
low complexity
oracle canonical
4.4
2018-04-19 CVE-2018-2761 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).
network
high complexity
oracle debian canonical mariadb netapp redhat
5.9
2018-04-19 CVE-2018-2759 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).
network
low complexity
oracle netapp canonical mariadb
4.9
2018-04-16 CVE-2018-10177 Infinite Loop vulnerability in multiple products
In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file.
network
low complexity
imagemagick canonical CWE-835
6.5
2018-04-16 CVE-2018-0737 Use of a Broken or Risky Cryptographic Algorithm vulnerability in multiple products
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack.
network
high complexity
openssl canonical CWE-327
5.9
2018-04-16 CVE-2018-10124 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
local
low complexity
linux debian canonical CWE-119
5.5
2018-04-13 CVE-2018-10087 Improper Input Validation vulnerability in multiple products
The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.
local
low complexity
linux debian canonical CWE-20
5.5
2018-04-03 CVE-2018-4146 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple canonical webkitgtk CWE-119
6.5
2018-04-03 CVE-2018-4133 Cross-site Scripting vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple canonical webkitgtk CWE-79
6.1