Ecosystem
Alpine
10,696 known vulnerabilities.
Most affected packages
qt6-qtwebengine 553
firefox-esr 491
firefox 358
librewolf 358
qt5-qtwebengine 338
xen 332
chromium 305
thunderbird 227
imagemagick 223
webkit2gtk 207
wireshark 205
curl 196
go 191
openjdk11 183
mariadb 171
openjdk8 170
vim 167
apache2 151
nodejs 149
openjdk17 145
openssl 143
ffmpeg 132
bind 114
dotnet8-runtime 112
py3-django 106
tiff 100
dotnet9-runtime 100
freerdp 100
postgresql15 98
openjdk21 97
wolfssl 97
dotnet10-runtime 93
samba 92
xorg-server 87
imagemagick6 85
qemu 85
graphicsmagick 82
php7 81
ghostscript 80
openjdk7 79
10,657 results · Feed
-
Unscored —
A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due…
-
Unscored —
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
-
High 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…
-
Unscored —CVE-2022-1552 EPSS 17%
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is m…
-
Unscored —
An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is ca…
-
Unscored —
There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1
-
Unscored —
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 call…
-
Unscored —
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can …
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
-
Unscored —
XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.
-
Unscored —
In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the f…
-
Unscored —
Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
-
Unscored —
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulner…
-
Unscored —
A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
-
Unscored —
A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properti…
-
Unscored —
A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read du…
-
Unscored —
A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd …
-
Unscored —
A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vuln…
-
High 7.5
A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a c…
-
Unscored —
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not al…
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_…
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
-
Unscored —
Advancecomp v2.3 contains a segmentation fault.
-
Unscored —
Advancecomp v2.3 was discovered to contain a segmentation fault.
-
Unscored —
Advancecomp v2.3 was discovered to contain a segmentation fault.
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
-
Unscored —
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
-
Medium 5.5
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a …
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
-
Critical 9.1
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a diffe…
-
Unscored —
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML fea…
-
Unscored —
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory whe…
-
Unscored —
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the pa…
-
Unscored —
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detect…
-
Unscored —
An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O…
-
Unscored —
A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
-
Unscored —
A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
-
Unscored —
A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Ma…
-
Unscored —
An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Ma…
-
Unscored —
An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafte…