Ecosystem
Alpine
10,780 known vulnerabilities.
Most affected packages
qt6-qtwebengine 553
firefox-esr 491
firefox 358
librewolf 358
qt5-qtwebengine 338
xen 333
chromium 305
thunderbird 227
imagemagick 223
webkit2gtk 207
wireshark 205
go 202
curl 196
openjdk11 183
mariadb 171
openjdk8 170
vim 167
apache2 151
postgresql15 150
nodejs 149
openjdk17 145
openssl 143
ffmpeg 132
dotnet8-runtime 128
dotnet9-runtime 114
bind 114
postgresql16 109
dotnet10-runtime 109
postgresql17 106
py3-django 106
tiff 100
freerdp 100
postgresql18 98
openjdk21 97
wolfssl 97
samba 92
xorg-server 87
imagemagick6 85
qemu 85
nodejs-current 84
10,741 results · Feed
-
Unscored —
A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.…
-
Unscored —
A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.…
-
Unscored —
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v…
-
Unscored —
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50…
-
Unscored —
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows…
-
Unscored —
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblen…
-
Unscored —
A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 …
-
Unscored —
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote att…
-
Unscored —
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a…
-
Unscored —
A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 a…
-
Unscored —
A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmh…
-
Unscored —
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of z…
-
Unscored —
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of…
-
Unscored —
In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a deni…
-
Unscored —
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, …
-
Unscored —
radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidenti…
-
Unscored —
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead…
-
Unscored —
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e a…
-
Unscored —
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, lead…
-
Unscored —
Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite …
-
Unscored —
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin…
-
Unscored —
An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led t…
-
Unscored —
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their cho…
-
Unscored —
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting…
-
Unscored —
The code for downloading files did not properly take care of special characters, which led to an attacker being able to…
-
Unscored —
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mi…
-
Unscored —
Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker th…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some o…
-
Unscored —CVE-2020-16248 Scanner template
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this m…
-
Unscored —CVE-2020-11993 EPSS 57%
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic …
-
Unscored —
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
-
Unscored —CVE-2020-9490 EPSS 89%
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 reque…
-
Unscored —
Unbounded read from invalid inputs in encoding/binary
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
-
Medium 5.5
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the …
-
Medium 6.7
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…
-
Unscored —
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory v…
-
Unscored —
radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dw…
-
Medium 5.7
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a s…