Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-8346 2Debian Redmine 2Debian Linux Redmine May 6, 2026 Apr 12, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form.
CVE-2016-2857 4Canonical DebianQemu+1 more 11Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+8 more May 6, 2026 Apr 12, 2016 N/A· v4 8.4 HIGH· v3 3.6 LOW· v2 The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.
CVE-2016-1568 3Debian QemuRedhat 4Debian Linux OpenstackQemu+1 more May 6, 2026 Apr 12, 2016 N/A· v4 8.8 HIGH· v3 6.9 MEDIUM· v2 Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHC...Show more Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.Show less
CVE-2015-8710 2Debian Xmlsoft 2Debian Linux Libxml2 May 6, 2026 Apr 11, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified...Show more The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.Show less
CVE-2016-2385 2Debian Kamailio 2Debian Linux Kamailio May 6, 2026 Apr 11, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and pro...Show more Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.Show less
CVE-2016-1235 2Debian Oar Project 2Debian Linux Oar May 6, 2026 Apr 11, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options.
CVE-2012-6700 2Debian Dhcpcd Project 2Debian Linux Dhcpcd May 6, 2026 Apr 11, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response.
CVE-2012-6699 2Debian Dhcpcd Project 2Debian Linux Dhcpcd May 6, 2026 Apr 11, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response.
CVE-2012-6698 2Debian Dhcpcd Project 2Debian Linux Dhcpcd May 6, 2026 Apr 11, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
CVE-2016-2381 5Canonical DebianOpensuse+2 more 10Communications Billing And Revenue Management Configuration ManagerDatabase Server+7 more May 6, 2026 Apr 8, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
CVE-2016-3153 2Debian Spip 2Debian Linux Spip May 6, 2026 Apr 8, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function.
CVE-2016-2851 3Cypherpunks DebianOpensuse 4Debian Linux LeapLibotr+1 more May 6, 2026 Apr 7, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR me...Show more Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.Show less
CVE-2016-2098 2Debian Rubyonrails 3Debian Linux RailsRuby On Rails May 6, 2026 Apr 7, 2016 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
CVE-2016-2511 2Debian Websvn 2Debian Linux Websvn May 6, 2026 Apr 7, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php.
CVE-2016-2510 3Beanshell CanonicalDebian 3Beanshell Debian LinuxUbuntu Linux May 6, 2026 Apr 7, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Hand...Show more BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.Show less
CVE-2016-2858 3Canonical DebianQemu 3Debian Linux QemuUbuntu Linux May 6, 2026 Apr 7, 2016 N/A· v4 6.5 MEDIUM· v3 1.9 LOW· v2 QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allo...Show more QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.Show less
CVE-2015-8837 3Debian FedoraprojectFuseiso Project 3Debian Linux FedoraFuseiso May 6, 2026 Mar 30, 2016 N/A· v4 7.3 HIGH· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathnam...Show more Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.Show less
CVE-2016-1650 3Debian GoogleOpensuse 3Chrome Debian LinuxOpensuse May 6, 2026 Mar 29, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have u...Show more The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.Show less
CVE-2016-1649 4Canonical DebianGoogle+1 more 4Chrome Debian LinuxOpensuse+1 more May 6, 2026 Mar 29, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial o...Show more The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.Show less
CVE-2016-1648 3Debian GoogleOpensuse 3Chrome Debian LinuxOpensuse May 6, 2026 Mar 29, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of se...Show more Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.Show less

Previous 1...432433434...508 Next