Ecosystem
Alpine
10,780 known vulnerabilities.
Most affected packages
qt6-qtwebengine 553
firefox-esr 491
firefox 358
librewolf 358
qt5-qtwebengine 338
xen 333
chromium 305
thunderbird 227
imagemagick 223
webkit2gtk 207
wireshark 205
go 202
curl 196
openjdk11 183
mariadb 171
openjdk8 170
vim 167
apache2 151
postgresql15 150
nodejs 149
openjdk17 145
openssl 143
ffmpeg 132
dotnet8-runtime 128
dotnet9-runtime 114
bind 114
postgresql16 109
dotnet10-runtime 109
postgresql17 106
py3-django 106
tiff 100
freerdp 100
postgresql18 98
openjdk21 97
wolfssl 97
samba 92
xorg-server 87
imagemagick6 85
qemu 85
nodejs-current 84
10,741 results · Feed
-
Critical 9.8CVE-2018-14881 Public exploit
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_REST…
-
Unscored —CVE-2018-14880 Public exploit
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
-
High 7.0CVE-2018-14879 Public exploit
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
-
High 7.5
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
-
Unscored —CVE-2018-14469 Public exploit
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
-
High 7.5
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
-
High 7.5
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
-
Unscored —
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
-
High 7.5
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
-
Unscored —
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
-
Unscored —
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a diffe…
-
High 7.5
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
-
High 7.5
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
-
Unscored —
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
-
Unscored —
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
-
Unscored —
PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected …
-
Unscored —
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via…
-
Medium 4.6
Cargo prior to Rust 1.26.0 may download the wrong dependency
Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key. Usage of the `package` key to rename dependencies in `Cargo.toml` is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is u…
-
Unscored —
Request smuggling due to accepting invalid headers in net/http via net/textproto
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
-
Unscored —
contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled.
-
Medium 6.1
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the s…
-
Critical 9.8
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-b…
KEV Mar 3, 2022 -
Unscored —
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…
-
Unscored —
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial o…
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of…
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox…
-
Unscored —
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters an…
-
Unscored —
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instance…
-
Unscored —
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating the…
-
Unscored —
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. Thi…
-
Unscored —
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a…
-
Unscored —
In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit…
-
Unscored —
In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit…
-
Unscored —CVE-2019-10082 EPSS 17%
In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memo…
-
Unscored —CVE-2019-10097 EPSS 53%
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using …
-
Unscored —
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error pag…
-
Unscored —
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insuf…