Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5743 2Debian Viewvc 2Debian Linux Viewvc Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.
CVE-2013-1425 2Debian Ldap Git Backup Project 2Debian Linux Ldap Git Backup Nov 21, 2024 Nov 7, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
CVE-2010-2450 2Debian Shibboleth 2Debian Linux Service Provider Nov 21, 2024 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmod...Show more The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.Show less
CVE-2019-3465 3Debian SimplesamlphpXmlseclibs Project 3Debian Linux SimplesamlphpXmlseclibs Jun 17, 2026 Nov 7, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate o...Show more Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.Show less
CVE-2012-0051 2Debian Tahoe Lafs 2Debian Linux Tahoe Lafs Nov 21, 2024 Nov 7, 2019 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
CVE-2012-0049 3Debian FedoraprojectOpenttd 3Debian Linux FedoraOpenttd Nov 21, 2024 Nov 7, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
CVE-2019-18809 5Canonical DebianFedoraproject+2 more 5Debian Linux FedoraLeap+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-18804 5Canonical DebianDjvulibre Project+2 more 5Debian Linux DjvulibreFedora+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
CVE-2009-5046 2Debian Eclipse 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.
CVE-2009-5045 2Debian Eclipse 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Dump Servlet information leak in jetty before 6.1.22.
CVE-2009-5049 2Debian Mortbay 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVE-2010-2471 2Debian Drupal 2Debian Linux Drupal Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Drupal versions 5.x and 6.x has open redirection
CVE-2011-4900 2Debian Typo3 2Debian Linux Typo3 Nov 21, 2024 Nov 6, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 TYPO3 before 4.5.4 allows Information Disclosure in the backend.
CVE-2011-4625 2Debian Simplesamlphp 2Debian Linux Simplesamlphp Nov 21, 2024 Nov 6, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.
CVE-2007-0899 2Clamav Debian 2Clamav Debian Linux Nov 21, 2024 Nov 6, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
CVE-2006-4245 2Archivemail Project Debian 2Archivemail Debian Linux Nov 21, 2024 Nov 6, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.
CVE-2019-5068 4Canonical DebianMesa3d+1 more 4Debian Linux LeapMesa+1 more Jun 17, 2026 Nov 5, 2019 N/A· v4 4.4 MEDIUM· v3 3.6 LOW· v2 An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnera...Show more An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.Show less
CVE-2013-5123 5Debian FedoraprojectPypa+2 more 6Debian Linux FedoraOpenshift+3 more Nov 21, 2024 Nov 5, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
CVE-2010-3674 2Debian Typo3 2Debian Linux Typo3 Nov 21, 2024 Nov 5, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 TYPO3 before 4.4.1 allows XSS in the frontend search box.
CVE-2013-6275 2Debian Horde 2Debian Linux Groupware Nov 21, 2024 Nov 5, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.

Previous 1...257258259...508 Next