Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-9065 2Debian Wordpress 2Debian Linux Wordpress May 13, 2026 May 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.
CVE-2017-9064 2Debian Wordpress 2Debian Linux Wordpress May 13, 2026 May 18, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.
CVE-2017-9063 2Debian Wordpress 2Debian Linux Wordpress May 13, 2026 May 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.
CVE-2017-9062 2Debian Wordpress 2Debian Linux Wordpress May 13, 2026 May 18, 2017 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.
CVE-2017-9061 2Debian Wordpress 2Debian Linux Wordpress May 13, 2026 May 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename.
CVE-2017-7493 2Debian Qemu 2Debian Linux Qemu May 13, 2026 May 17, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-...Show more Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.Show less
CVE-2017-8849 2Debian Smb4k Project 2Debian Linux Smb4k May 13, 2026 May 17, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
CVE-2017-7487 2Debian Linux 2Debian Linux Linux Kernel May 13, 2026 May 14, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impa...Show more The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.Show less
CVE-2017-8925 2Debian Linux 2Debian Linux Linux Kernel May 13, 2026 May 12, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.
CVE-2017-8924 2Debian Linux 2Debian Linux Linux Kernel May 13, 2026 May 12, 2017 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory...Show more The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow.Show less
CVE-2017-8890 2Debian Linux 2Debian Linux Linux Kernel May 13, 2026 May 10, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging...Show more The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.Show less
CVE-2017-8846 2Debian Long Range Zip Project 2Debian Linux Long Range Zip May 13, 2026 May 8, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted archive.
CVE-2017-8844 2Debian Long Range Zip Project 2Debian Linux Long Range Zip May 13, 2026 May 8, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a craft...Show more The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive.Show less
CVE-2017-8831 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux May 13, 2026 May 8, 2017 N/A· v4 6.4 MEDIUM· v3 6.9 MEDIUM· v2 The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other i...Show more The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.Show less
CVE-2017-8829 1Debian 1Lintian May 13, 2026 May 8, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source package with a crafted YAML file.
CVE-2017-8112 2Debian Qemu 2Debian Linux Qemu May 13, 2026 May 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.9 MEDIUM· v2 hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
CVE-2017-8086 2Debian Qemu 2Debian Linux Qemu May 13, 2026 May 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.9 MEDIUM· v2 Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value...Show more Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.Show less
CVE-2017-7483 2Debian Rxvt Project 2Debian Linux Rxvt May 13, 2026 May 2, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read...Show more Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.Show less
CVE-2016-10243 3Debian FedoraprojectTug 3Debian Linux FedoraTex Live May 13, 2026 May 2, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
CVE-2017-8365 2Debian Libsndfile Project 2Debian Linux Libsndfile May 13, 2026 Apr 30, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.

Previous 1...400401402...508 Next