Ecosystem
Alpine
10,677 known vulnerabilities.
Most affected packages
qt6-qtwebengine 553
firefox-esr 491
firefox 358
librewolf 358
qt5-qtwebengine 338
xen 332
chromium 305
thunderbird 227
imagemagick 223
webkit2gtk 207
wireshark 205
curl 196
go 191
openjdk11 183
mariadb 171
openjdk8 170
vim 167
apache2 148
openjdk17 145
openssl 143
nodejs 134
ffmpeg 132
bind 114
dotnet8-runtime 112
py3-django 106
tiff 100
dotnet9-runtime 100
freerdp 100
postgresql15 98
openjdk21 97
wolfssl 97
dotnet10-runtime 93
samba 92
xorg-server 87
imagemagick6 85
qemu 85
graphicsmagick 82
php7 81
ghostscript 80
openjdk7 79
794 results · Clear filters · Feed
-
Unscored —
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large…
-
Unscored —
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected a…
-
Unscored —CVE-2017-6060 Public exploit
Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers …
-
Unscored —CVE-2017-2362 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2369 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2373 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2363 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2364 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The…
-
Unscored —CVE-2017-2371 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" compo…
-
Unscored —CVE-2017-2365 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary S…
-
Unscored —
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function …
-
Medium 5.9
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static…
-
Unscored —CVE-2016-10191 Public exploit
Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, an…
-
Unscored —CVE-2016-10190 Public exploit
Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3…
-
Unscored —CVE-2016-9813 Public exploit
The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2016-10140 Public exploit
Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled w…
-
High 7.3
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execut…
-
High 7.0CVE-2016-10010 Public exploit
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which…
-
Critical 9.8
Remote code execution in PHPMailer
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping perf…
-
Critical 9.8
Remote code execution in PHPMailer
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
KEV Jul 7, 2025 -
Unscored —CVE-2016-6664 Public exploit
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server bef…
-
Unscored —CVE-2016-5180 Public exploit
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cau…
-
Unscored —
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly…
-
Unscored —
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.…
-
High 7.5
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…
-
Unscored —
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password …
-
Unscored —CVE-2016-6512 Public exploit
epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, wh…
-
Unscored —CVE-2016-6505 Public exploit
epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 all…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…
-
Unscored —
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted …
-
Unscored —
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a…
-
Unscored —
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial o…
-
Unscored —
The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (l…