Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-0372 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
CVE-2017-0370 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.
CVE-2017-0369 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.
CVE-2017-0368 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.
CVE-2017-0367 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.
CVE-2017-0366 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 5.4 MEDIUM· v3 4.0 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.
CVE-2017-0365 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 4.7 MEDIUM· v3 2.6 LOW· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.
CVE-2017-0364 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link.
CVE-2017-0363 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites.
CVE-2017-0362 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token.
CVE-2017-0361 2Debian Mediawiki 2Debian Linux Mediawiki Nov 21, 2024 Apr 13, 2018 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.
CVE-2017-0359 2Debian Reproducible Builds 2Debian Linux Diffoscope Nov 21, 2024 Apr 13, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.
CVE-2017-0358 2Debian Tuxera 2Debian Linux Ntfs 3g Dec 4, 2025 Apr 13, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw...Show more Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.Show less
CVE-2017-0357 2Debian Iucode Tool Project 2Debian Linux Iucode Tool Nov 21, 2024 Apr 13, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.
CVE-2017-0356 2Debian Ikiwiki 2Debian Linux Ikiwiki Nov 21, 2024 Apr 13, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.
CVE-2016-9646 2Debian Ikiwiki 2Debian Linux Ikiwiki Nov 21, 2024 Apr 13, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.
CVE-2018-10087 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux Nov 21, 2024 Apr 13, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of th...Show more The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.Show less
CVE-2018-1084 4Canonical CorosyncDebian+1 more 4Corosync Debian LinuxEnterprise Linux Server+1 more Nov 21, 2024 Apr 12, 2018 N/A· v4 7.5 HIGH· v3 7.5 HIGH· v2 corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
CVE-2018-1086 3Clusterlabs DebianRedhat 3Debian Linux Enterprise Linux Server EusPacemaker Command Line Interface Nov 21, 2024 Apr 12, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensi...Show more pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.Show less
CVE-2018-10061 2Cacti Debian 2Cacti Debian Linux Nov 21, 2024 Apr 12, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).

Previous 1...351352353...501 Next