Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-9532 2Debian Libtiff 2Debian Linux Libtiff May 13, 2026 Feb 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.
CVE-2016-7800 3Debian GraphicsmagickOpensuse 4Debian Linux GraphicsmagickLeap+1 more May 13, 2026 Feb 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-b...Show more Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.Show less
CVE-2016-7449 3Debian GraphicsmagickOpensuse 4Debian Linux GraphicsmagickLeap+1 more May 13, 2026 Feb 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an "unterminated" string.
CVE-2016-7448 3Debian GraphicsmagickOpensuse 4Debian Linux GraphicsmagickLeap+1 more May 13, 2026 Feb 6, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of service (CPU consumption or large memory allocations) via vectors involving the header information and the file size.
CVE-2016-7447 3Debian GraphicsmagickOpensuse 4Debian Linux GraphicsmagickLeap+1 more May 13, 2026 Feb 6, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors.
CVE-2016-7446 3Debian GraphicsmagickOpensuse 4Debian Linux GraphicsmagickLeap+1 more May 13, 2026 Feb 6, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2...Show more Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.Show less
CVE-2016-10165 6Canonical DebianLittlecms+3 more 19Active Iq Unified Manager Debian LinuxE Series Santricity Management+16 more May 13, 2026 Feb 3, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bo...Show more The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.Show less
CVE-2016-5241 3Debian GraphicsmagickOpensuse 4Debian Linux GraphicsmagickLeap+1 more May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file.
CVE-2016-4571 2Debian Mini Xml Project 2Debian Linux Mini Xml May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
CVE-2016-4570 2Debian Mini Xml Project 2Debian Linux Mini Xml May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
CVE-2016-2318 4Debian GraphicsmagickOpensuse+1 more 7Debian Linux GraphicsmagickLeap+4 more May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in code...Show more GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.Show less
CVE-2016-2317 4Debian GraphicsmagickOpensuse+1 more 7Debian Linux GraphicsmagickLeap+4 more May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in m...Show more Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.Show less
CVE-2016-9963 3Canonical DebianExim 3Debian Linux EximUbuntu Linux May 13, 2026 Feb 1, 2017 N/A· v4 5.9 MEDIUM· v3 2.6 LOW· v2 Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
CVE-2016-9119 3Canonical DebianMoinmo 3Debian Linux MoinmoinUbuntu Linux May 13, 2026 Jan 30, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-7798 2Debian Ruby Lang 2Debian Linux Openssl May 13, 2026 Jan 30, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes--gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mecha...Show more The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes--gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.Show less
CVE-2016-9939 2Cryptopp Debian 2Crypto++ Debian Linux May 13, 2026 Jan 30, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block based on the length field of the ASN.1 object. If there is not enough content octe...Show more Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will allocate a memory block based on the length field of the ASN.1 object. If there is not enough content octets in the ASN.1 object, then the function will fail and the memory block will be zeroed even if its unused. There is a noticeable delay during the wipe for a large allocation.Show less
CVE-2016-2518 7Debian FreebsdNetapp+4 more 17Clustered Data Ontap Communications User Data RepositoryData Ontap+14 more May 13, 2026 Jan 30, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
CVE-2015-7977 8Canonical DebianFedoraproject+5 more 10Clustered Data Ontap Debian LinuxFedora+7 more May 13, 2026 Jan 30, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
CVE-2017-5612 2Debian Wordpress 2Debian Linux Wordpress May 13, 2026 Jan 30, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted e...Show more Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt.Show less
CVE-2017-5611 3Debian OracleWordpress 3Data Integrator Debian LinuxWordpress May 13, 2026 Jan 30, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that...Show more SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.Show less

Previous 1...411412413...508 Next