CVEs (10,001)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Debian Ytnef Project2Debian Linux YtnefMay 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef. |
2Debian Ytnef Project2Debian Linux YtnefMay 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to MAPIPrint() in libytnef. |
2Debian R Project2Debian Linux RMay 13, 2026 Mar 10, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption...Show more |
3Debian FedoraprojectGnome3Debian Linux FedoraGdk PixbufMay 13, 2026 Mar 10, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file. |
3Debian FedoraprojectGnome3Debian Linux FedoraGdk PixbufMay 13, 2026 Mar 10, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO...Show more |
3Debian FedoraprojectGnome3Debian Linux FedoraGdk PixbufMay 13, 2026 Mar 10, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out...Show more |
2Debian Linux2Debian Linux Linux KernelMay 13, 2026 Mar 7, 2017 N/A· v4 7.0 HIGH· v3 6.9 MEDIUM· v2 Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline. |
2Debian Libupnp Project2Debian Linux LibupnpMay 13, 2026 Mar 7, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary...Show more |
2Debian Libupnp Project2Debian Linux LibupnpMay 13, 2026 Mar 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. |
2Debian Libtiff2Debian Linux LibtiffMay 13, 2026 Mar 7, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. |
2Artifex Debian2Afpl Ghostscript Debian LinuxMay 13, 2026 Mar 7, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file. |
2Debian Freetype2Debian Linux FreetypeMay 13, 2026 Mar 6, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or pos...Show more |
2Debian Imagemagick2Debian Linux ImagemagickMay 13, 2026 Mar 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. |
2Debian Imagemagick2Debian Linux ImagemagickMay 13, 2026 Mar 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS). |
2Debian Imagemagick2Debian Linux ImagemagickMay 13, 2026 Mar 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS. |
2Debian Wireshark2Debian Linux WiresharkMay 13, 2026 Mar 4, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes. |
2Debian Wireshark2Debian Linux WiresharkMay 13, 2026 Mar 4, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets. |
2Debian Wireshark2Debian Linux WiresharkMay 13, 2026 Mar 4, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incr...Show more |
2Debian Wireshark2Debian Linux WiresharkMay 13, 2026 Mar 4, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability le...Show more |
2Debian Wireshark2Debian Linux WiresharkMay 13, 2026 Mar 4, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet laten...Show more |