Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-5045 2Debian Eclipse 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Dump Servlet information leak in jetty before 6.1.22.
CVE-2009-5049 2Debian Mortbay 2Debian Linux Jetty Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVE-2010-2471 2Debian Drupal 2Debian Linux Drupal Nov 21, 2024 Nov 6, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Drupal versions 5.x and 6.x has open redirection
CVE-2011-4900 2Debian Typo3 2Debian Linux Typo3 Nov 21, 2024 Nov 6, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 TYPO3 before 4.5.4 allows Information Disclosure in the backend.
CVE-2011-4625 2Debian Simplesamlphp 2Debian Linux Simplesamlphp Nov 21, 2024 Nov 6, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.
CVE-2007-0899 2Clamav Debian 2Clamav Debian Linux Nov 21, 2024 Nov 6, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
CVE-2006-4245 2Archivemail Project Debian 2Archivemail Debian Linux Nov 21, 2024 Nov 6, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.
CVE-2019-5068 4Canonical DebianMesa3d+1 more 4Debian Linux LeapMesa+1 more Jun 17, 2026 Nov 5, 2019 N/A· v4 4.4 MEDIUM· v3 3.6 LOW· v2 An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnera...Show more An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.Show less
CVE-2013-5123 5Debian FedoraprojectPypa+2 more 6Debian Linux FedoraOpenshift+3 more Nov 21, 2024 Nov 5, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
CVE-2010-3674 2Debian Typo3 2Debian Linux Typo3 Nov 21, 2024 Nov 5, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 TYPO3 before 4.4.1 allows XSS in the frontend search box.
CVE-2013-6275 2Debian Horde 2Debian Linux Groupware Nov 21, 2024 Nov 5, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
CVE-2013-6461 3Debian NokogiriRedhat 7Cloudforms Management Engine Debian LinuxEnterprise Mrg+4 more Nov 21, 2024 Nov 5, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
CVE-2013-6460 3Debian NokogiriRedhat 7Cloudforms Management Engine Debian LinuxEnterprise Mrg+4 more Nov 21, 2024 Nov 5, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
CVE-2016-1000002 4Debian GnomeOpensuse+1 more 4Debian Linux Enterprise LinuxGnome Display Manager+1 more Nov 21, 2024 Nov 5, 2019 N/A· v4 2.4 LOW· v3 2.1 LOW· v2 gdm3 3.14.2 and possibly later has an information leak before screen lock
CVE-2013-6365 3Debian HordeOpensuse 3Debian Linux GroupwareOpensuse Nov 21, 2024 Nov 5, 2019 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
CVE-2013-6364 2Debian Horde 2Debian Linux Groupware Nov 21, 2024 Nov 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book
CVE-2017-5333 5Canonical DebianIcoutils Project+2 more 11Debian Linux Enterprise LinuxEnterprise Linux Desktop+8 more Nov 21, 2024 Nov 4, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafte...Show more Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file.Show less
CVE-2017-5332 5Canonical DebianIcoutils Project+2 more 11Debian Linux Enterprise LinuxEnterprise Linux Desktop+8 more Nov 21, 2024 Nov 4, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a...Show more The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.Show less
CVE-2017-5331 4Canonical DebianIcoutils Project+1 more 5Debian Linux IcoutilsLeap+2 more Nov 21, 2024 Nov 4, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.
CVE-2013-4251 4Debian FedoraprojectRedhat+1 more 4Debian Linux Enterprise LinuxFedora+1 more Nov 21, 2024 Nov 4, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

Previous 1...257258259...508 Next