Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-1811 2Debian Mantisbt 2Debian Linux Mantisbt Nov 21, 2024 Nov 7, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
CVE-2013-1809 2Debian Gambas Project 2Debian Linux Gambas Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories.
CVE-2007-6745 2Clamav Debian 2Clamav Debian Linux Nov 21, 2024 Nov 7, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
CVE-2013-1429 2Canonical Debian 3Debian Linux LintianUbuntu Linux Nov 21, 2024 Nov 7, 2019 N/A· v4 6.3 MEDIUM· v3 4.3 MEDIUM· v2 Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.
CVE-2007-5743 2Debian Viewvc 2Debian Linux Viewvc Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.
CVE-2013-1425 2Debian Ldap Git Backup Project 2Debian Linux Ldap Git Backup Nov 21, 2024 Nov 7, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
CVE-2010-2450 2Debian Shibboleth 2Debian Linux Service Provider Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmod...Show more The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.Show less
CVE-2019-3465 3Debian SimplesamlphpXmlseclibs Project 3Debian Linux SimplesamlphpXmlseclibs Jun 17, 2026 Nov 7, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate o...Show more Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.Show less
CVE-2012-0051 2Debian Tahoe Lafs 2Debian Linux Tahoe Lafs Nov 21, 2024 Nov 7, 2019 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
CVE-2012-0049 3Debian FedoraprojectOpenttd 3Debian Linux FedoraOpenttd Nov 21, 2024 Nov 7, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
CVE-2019-18809 5Canonical DebianFedoraproject+2 more 5Debian Linux FedoraLeap+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-18804 5Canonical DebianDjvulibre Project+2 more 5Debian Linux DjvulibreFedora+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
CVE-2009-5046 2Debian Eclipse 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.
CVE-2009-5045 2Debian Eclipse 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Dump Servlet information leak in jetty before 6.1.22.
CVE-2009-5049 2Debian Mortbay 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVE-2010-2471 2Debian Drupal 2Debian Linux Drupal Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Drupal versions 5.x and 6.x has open redirection
CVE-2011-4900 2Debian Typo3 2Debian Linux Typo3 Nov 21, 2024 Nov 6, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 TYPO3 before 4.5.4 allows Information Disclosure in the backend.
CVE-2011-4625 2Debian Simplesamlphp 2Debian Linux Simplesamlphp Nov 21, 2024 Nov 6, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.
CVE-2007-0899 2Clamav Debian 2Clamav Debian Linux Nov 21, 2024 Nov 6, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
CVE-2006-4245 2Archivemail Project Debian 2Archivemail Debian Linux Nov 21, 2024 Nov 6, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.

Previous 1...256257258...501 Next