Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-18848 2Debian Json Jwt Project 2Debian Linux Json Jwt Jun 17, 2026 Nov 12, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
CVE-2011-3618 2Atop Project Debian 2Atop Debian Linux Nov 21, 2024 Nov 12, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 atop: symlink attack possible due to insecure tempfile handling
CVE-2011-2897 3Debian GnomeRedhat 3Debian Linux Enterprise LinuxGdk Pixbuf Nov 21, 2024 Nov 12, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw
CVE-2019-18849 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraTnef+1 more Jun 17, 2026 Nov 11, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read...Show more In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.Show less
CVE-2009-3614 2Debian Noping 2Debian Linux Liboping Nov 21, 2024 Nov 9, 2019 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 liboping 1.3.2 allows users reading arbitrary files upon the local system.
CVE-2019-14824 3Debian FedoraprojectRedhat 3389 Directory Server Debian LinuxEnterprise Linux Jun 17, 2026 Nov 8, 2019 N/A· v4 6.5 MEDIUM· v3 3.5 LOW· v2 A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes,...Show more A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.Show less
CVE-2008-7291 2Debian Gri Project 2Debian Linux Gri Nov 21, 2024 Nov 8, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 gri before 2.12.18 generates temporary files in an insecure way.
CVE-2013-1811 2Debian Mantisbt 2Debian Linux Mantisbt Nov 21, 2024 Nov 7, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New".
CVE-2013-1809 2Debian Gambas Project 2Debian Linux Gambas Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories.
CVE-2007-6745 2Clamav Debian 2Clamav Debian Linux Nov 21, 2024 Nov 7, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
CVE-2013-1429 2Canonical Debian 3Debian Linux LintianUbuntu Linux Nov 21, 2024 Nov 7, 2019 N/A· v4 6.3 MEDIUM· v3 4.3 MEDIUM· v2 Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.
CVE-2007-5743 2Debian Viewvc 2Debian Linux Viewvc Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.
CVE-2013-1425 2Debian Ldap Git Backup Project 2Debian Linux Ldap Git Backup Nov 21, 2024 Nov 7, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
CVE-2010-2450 2Debian Shibboleth 2Debian Linux Service Provider Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmod...Show more The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.Show less
CVE-2019-3465 3Debian SimplesamlphpXmlseclibs Project 3Debian Linux SimplesamlphpXmlseclibs Jun 17, 2026 Nov 7, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate o...Show more Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.Show less
CVE-2012-0051 2Debian Tahoe Lafs 2Debian Linux Tahoe Lafs Nov 21, 2024 Nov 7, 2019 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
CVE-2012-0049 3Debian FedoraprojectOpenttd 3Debian Linux FedoraOpenttd Nov 21, 2024 Nov 7, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
CVE-2019-18809 5Canonical DebianFedoraproject+2 more 5Debian Linux FedoraLeap+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-18804 5Canonical DebianDjvulibre Project+2 more 5Debian Linux DjvulibreFedora+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
CVE-2009-5046 2Debian Eclipse 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.

Previous 1...256257258...508 Next