Debian Linux

debian_linux

Vendor: Debian • 10,002 CVEs

CVEs (10,002)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1488 3Debian OpensuseRsyslog 3Debian Linux OpensuseRsyslog Nov 21, 2024 Nov 14, 2019 N/A· v4 5.5 MEDIUM· v3 1.9 LOW· v2 A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon se...Show more A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.Show less
CVE-2011-1145 4Debian OpensuseRedhat+1 more 4Debian Linux Enterprise LinuxOpensuse+1 more Nov 21, 2024 Nov 14, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
CVE-2011-1136 2Debian Tesseract Project 2Debian Linux Tesseract Nov 21, 2024 Nov 14, 2019 N/A· v4 4.7 MEDIUM· v3 6.3 MEDIUM· v2 In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.
CVE-2011-1070 2Debian V86d Project 2Debian Linux V86d Nov 21, 2024 Nov 14, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
CVE-2011-0544 2Debian Phpbb 2Debian Linux Phpbb Nov 21, 2024 Nov 14, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag.
CVE-2010-5108 2Debian Edgewall 2Debian Linux Trac Nov 21, 2024 Nov 13, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
CVE-2010-4817 2Debian Pithos Project 2Debian Linux Pithos Nov 21, 2024 Nov 13, 2019 N/A· v4 5.5 MEDIUM· v3 3.6 LOW· v2 pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
CVE-2010-4664 3Consolekit Project DebianRedhat 3Consolekit Debian LinuxEnterprise Linux Nov 21, 2024 Nov 13, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
CVE-2010-4661 5Debian FedoraprojectOpensuse+2 more 5Debian Linux Enterprise LinuxFedora+2 more Nov 21, 2024 Nov 13, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.
CVE-2010-4657 3Debian PhpRedhat 3Debian Linux Enterprise LinuxPhp Nov 21, 2024 Nov 13, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
CVE-2010-4654 2Debian Freedesktop 2Debian Linux Poppler Nov 21, 2024 Nov 13, 2019 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
CVE-2010-4653 2Debian Freedesktop 2Debian Linux Poppler Nov 21, 2024 Nov 13, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.
CVE-2010-4533 2Debian Offlineimap 2Debian Linux Offlineimap Nov 21, 2024 Nov 13, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.
CVE-2010-4532 2Debian Offlineimap 2Debian Linux Offlineimap Nov 21, 2024 Nov 13, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.
CVE-2012-4385 2Debian Trilexnet 2Debian Linux Letodms Nov 21, 2024 Nov 13, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 letodms 3.3.6 has CSRF via change password
CVE-2012-4384 2Debian Trilexnet 2Debian Linux Letodms Nov 21, 2024 Nov 13, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar
CVE-2019-18397 2Debian Gnu 2Debian Linux Fribidi Jun 17, 2026 Nov 13, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering...Show more A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in HexChat.Show less
CVE-2010-3844 2Debian Ettercap Project 2Debian Linux Ettercap Nov 21, 2024 Nov 12, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.
CVE-2010-3440 2Babiloo Project Debian 2Babiloo Debian Linux Nov 21, 2024 Nov 12, 2019 N/A· v4 5.5 MEDIUM· v3 3.3 LOW· v2 babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files.
CVE-2010-3299 2Debian Rubyonrails 2Debian Linux Rails Nov 21, 2024 Nov 12, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

Previous 1...254255256...501 Next