Ecosystem
Alpine
10,780 known vulnerabilities.
Most affected packages
qt6-qtwebengine 553
firefox-esr 491
firefox 358
librewolf 358
qt5-qtwebengine 338
xen 333
chromium 305
thunderbird 227
imagemagick 223
webkit2gtk 207
wireshark 205
go 202
curl 196
openjdk11 183
mariadb 171
openjdk8 170
vim 167
apache2 151
postgresql15 150
nodejs 149
openjdk17 145
openssl 143
ffmpeg 132
dotnet8-runtime 128
dotnet9-runtime 114
bind 114
postgresql16 109
dotnet10-runtime 109
postgresql17 106
py3-django 106
tiff 100
freerdp 100
postgresql18 98
openjdk21 97
wolfssl 97
samba 92
xorg-server 87
imagemagick6 85
qemu 85
nodejs-current 84
10,741 results · Feed
-
Unscored —
Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause m…
-
Unscored —
The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arb…
-
Unscored —
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack…
-
High 8.8
phpMyAdmin SQL injection in user accounts page
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access …
-
Unscored —
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the abil…
-
Unscored —
GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting …
-
Unscored —
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in th…
-
Unscored —
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…
-
Unscored —
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securi…
-
Unscored —
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed ev…
-
Unscored —
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could c…
-
Unscored —
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race c…
-
Unscored —
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unpri…
-
Unscored —
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially explo…
-
Unscored —
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was poss…
-
Unscored —
If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that…
-
Unscored —
An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypa…
-
Unscored —
A compromised content process could send a message to the parent process that would cause the 'Click to Play' permissio…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some o…
-
Unscored —
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these enti…
-
Unscored —
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call a…
-
Unscored —
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned i…
-
Unscored —
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploi…
-
Unscored —
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This c…
-
Unscored —
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was install…
-
Unscored —
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequen…
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…
-
Unscored —
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (…
-
High 7.5
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially …
-
Medium 6.7
In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is u…
-
Low 3.7
A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a deni…
-
High 7.5
Uncontrolled Resource Consumption in Pillow
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due …
-
High 8.8
Integer overflow in Pillow
libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
-
Critical 9.8
Buffer Copy without Checking Size of Input in Pillow
libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.