CVEs (10,013)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Debian Freedesktop2Debian Linux PopplerMay 13, 2026 Oct 2, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service...Show more |
2Debian Freedesktop2Debian Linux PopplerMay 13, 2026 Sep 30, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document. |
2Debian Freedesktop2Debian Linux PopplerMay 13, 2026 Sep 30, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document. |
Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary...Show more |
3Canonical DebianExiv23Debian Linux Exiv2Ubuntu LinuxMay 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. |
3Canonical DebianExiv23Debian Linux Exiv2Ubuntu LinuxMay 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. |
3Canonical DebianExiv23Debian Linux Exiv2Ubuntu LinuxMay 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. |
2Botan Project Debian2Botan Debian LinuxMay 13, 2026 Sep 26, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD...Show more |
2Debian Graphicsmagick2Debian Linux GraphicsmagickMay 13, 2026 Sep 25, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via...Show more |
2Debian Jsoup2Debian Linux JsoupOct 8, 2026 Sep 25, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3. |
3Canonical DebianLinux3Debian Linux Linux KernelUbuntu LinuxMay 13, 2026 Sep 21, 2017 N/A· v4 4.4 MEDIUM· v3 4.9 MEDIUM· v2 A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink...Show more |
2Debian Xiph.org2Debian Linux LibvorbisMay 13, 2026 Sep 21, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a craf...Show more |
2Debian Libsndfile Project2Debian Linux LibsndfileMay 13, 2026 Sep 21, 2017 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values. |
2Debian Libsndfile Project2Debian Linux LibsndfileMay 13, 2026 Sep 21, 2017 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values. |
2Debian Libsndfile Project2Debian Linux LibsndfileMay 13, 2026 Sep 21, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file. |
3Canonical DebianXiph.org3Debian Linux LibvorbisUbuntu LinuxMay 13, 2026 Sep 21, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). |
3Canonical DebianXiph.org3Debian Linux LibvorbisUbuntu LinuxMay 13, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. |
2Alinto Debian2Debian Linux SogoMay 13, 2026 Sep 20, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. |
3Debian NodejsUronode3Debian Linux Node.jsUro NodeMay 13, 2026 Sep 20, 2017 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service (bandwidth consumption). |
3Canonical DebianImagemagick3Debian Linux ImagemagickUbuntu LinuxMay 13, 2026 Sep 20, 2017 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an applic...Show more |