CVEs (10,013)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Debian Videolan2Debian Linux Vlc Media PlayerNov 2, 2026 Aug 29, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
3Debian LinuxRedhat3Debian Linux Enterprise LinuxLinux KernelOct 8, 2026 Aug 29, 2019 N/A· v4 4.7 MEDIUM· v3 4.7 MEDIUM· v2 In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service. |
2Debian Videolan2Debian Linux Vlc Media PlayerNov 2, 2026 Aug 29, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file. |
2Debian Videolan2Debian Linux Vlc Media PlayerNov 2, 2026 Aug 29, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file. |
2Debian Videolan2Debian Linux Vlc Media PlayerNov 2, 2026 Aug 29, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file. |
2Debian Videolan2Debian Linux Vlc Media PlayerNov 2, 2026 Aug 29, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file. |
3Debian DovecotFedoraproject4Debian Linux DovecotFedora+1 moreJun 17, 2026 Aug 29, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writ...Show more |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion in svcstatus.c. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter. |
2Debian Xymon2Debian Linux XymonJun 17, 2026 Aug 27, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Xymon through 4.3.28, a buffer overflow vulnerability exists in the csvinfo CGI script. The overflow may be exploited by sending a crafted GET request that triggers an sprintf of the srcdb parameter. |
3Debian LinuxOpensuse3Debian Linux LeapLinux KernelJun 17, 2026 Aug 27, 2019 N/A· v4 4.4 MEDIUM· v3 4.9 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishand...Show more |
6Canonical DebianFedoraproject+3 more18Aff A700s Firmware Data Availability ServicesDebian Linux+15 moreJun 17, 2026 Aug 25, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlo...Show more |
3Debian FedoraprojectGnu3Debian Linux FedoraLibextractorJun 17, 2026 Aug 23, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c. |
3Canonical DebianLinux3Debian Linux Linux KernelUbuntu LinuxJun 17, 2026 Aug 23, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir). |
2Debian Otrs2Debian Linux OtrsJun 17, 2026 Aug 21, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. An attacker who is logged into OTRS as an agent user with appropriate...Show more |