Ubuntu Linux
Approved changes feed: RSS · Atom
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:lts:*:*:*:*:*
part: o version: 12.04 update: *
| Vendor | Canonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88) |
|---|---|
| Product | Ubuntu Linux (f82c71f7-7613-59c6-b78d-a15b5eb77bd3) |
| Edition | lts |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0222 |
vulnerable | 2026-06-08 05:06:13.967654 |
Details available
ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.
Published: 2015-01-16T16:00:00.000Z
Updated: 2024-08-06T04:03:10.434Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0221 |
vulnerable | 2026-06-08 05:06:13.967115 |
Details available
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.
Published: 2015-01-16T16:00:00.000Z
Updated: 2024-08-06T04:03:10.378Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0220 |
vulnerable | 2026-06-08 05:06:13.965976 |
Details available
The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.
Published: 2015-01-16T16:00:00.000Z
Updated: 2024-08-06T04:03:10.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3633 |
vulnerable | 2026-06-08 05:05:41.943174 |
Details available
The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
Published: 2014-10-06T14:00:00.000Z
Updated: 2024-08-06T10:50:17.943Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0476 |
vulnerable | 2026-06-08 05:05:13.075493 |
Details available
The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.
Published: 2014-10-25T22:00:00.000Z
Updated: 2024-08-06T09:20:17.970Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.